Screen Sharing without local user or VNC

Question

Level 1

14 points

Screen Sharing without local user or VNC

I'm trying to figure out if this is possible.

I'd like to use screen sharing to control one Mac from another, but without having to use a local account on the target Mac (other than the default administrator). I know I can use third party VNC software, but my boss would prefer an all-Apple solution. Using the local administrator account isn't an option due to security concerns. For similar reasons, adding a sharing-only user account will be frowned on. Using Apple Remote Desktop also isn't an option. Is there a way to use Apple's screen sharing to connect to another Mac, but use the password set for VNC access in the Remote Management preferences instead of a local user account?

Thanks to anyone who can answer this question definitively.

iMac, Mac OS X (10.6.1)

Posted on Nov 6, 2009 9:52 AM

Reply

Answer 1

K T

Level 7

23,889 points

Nov 6, 2009 9:58 AM in response to ClintR

Hi ClintR & welcome to the forums.

Have you taken a look at Snow Leopard Server...because it seems that otherwise what is wanted tends to avoid/break/tries to thwart the basic security that is build in to Snow Leopard, as an example.

Reply

Answer 2

ClintR Author

Level 1

14 points

Nov 6, 2009 10:04 AM in response to K T

Thanks.

Server isn't an option. We're trying to eliminate Timbuktu without changing the setup much (if at all). I understand that this is a fairly odd way of doing it, but I need to be able to definitively say that the only options are third party VNC or a local (sharing only) account.

Reply

Answer 3

V.K.

Level 9

56,192 points

Nov 6, 2009 10:17 AM in response to ClintR

no, that's not possible. Your only options are
1. vnc as a registered user. that could be a sharing only user. not sure why this is a problem.
Or
2. by sending a request to share screen. to make that option available you need to check the appropriate box in the computer settings in system preferences->sharing->screen sahring->computer settings.

but this option requires a user on the receiving end to manually approve the screen sharing request. so I'm guessing that's not an option for you.

Reply

Answer 4

Nov 6, 2009 10:36 AM in response to ClintR

ClintR wrote:
I'm trying to figure out if this is possible.

I'd like to use screen sharing to control one Mac from another, but without having to use a local account on the target Mac (other than the default >administrator).

Defaut administrator--What is that? The admin set up when the system was installed? It sounds like you could use it, right? And, you need to control the computer. Wouldn't using this account work. I am sure I am wrong, but please clarify.

Reply

Answer 5

ClintR Author

Level 1

14 points

Nov 6, 2009 10:46 AM in response to V.K.

Thanks.

The problem with a local user is we use network accounts, and can't enforce password changes on a local account.

You're correct that this is a box that is only accessed remotely, so requesting screen sharing isn't an option.

Reply

Answer 6

ClintR Author

Level 1

14 points

Nov 6, 2009 11:54 AM in response to donv_the_ghost

Defaut administrator--What is that? The admin set up when the system was installed?
It sounds like you could use it, right? And, you need to control the computer. Wouldn't
using this account work. I am sure I am wrong, but please clarify.

Yes, it will work, but it's not acceptable due to security considerations. The user accessing the Mac remotely isn't allowed to have administrator permissions.

Reply

Answer 7

Nov 6, 2009 12:08 PM in response to ClintR

I think you company's rules are two strict to allow you to do what you want or need.

Reply

Answer 8

kshusker

Level 1

35 points

Nov 10, 2009 8:56 AM in response to ClintR

What you want to do isn't possible with the built-in Apple stuff. Ironically Timbuktu would do exactly what you want, just keep using it unless your admin has some fetish about running only Apple software.

Reply

Answer 9

ClintR Author

Level 1

14 points

Nov 10, 2009 4:47 PM in response to kshusker

The reason we're trying to replace Timbuktu is that we suspect it's triggering a loginwindow crash that is causing all sorts of other problems. We'll probably go with VNC, my boss just wanted me to make sure there wasn't another Apple-only alternative.

Reply

Answer 10

Nov 13, 2009 9:29 AM in response to ClintR

Hi Clint,

I work on the Timbuktu team at Motorola. We are not aware of any crashes like this that are caused by Timbuktu. If you are willing, please email me, msilverman (at) motorola.com so I can work with you on this issue. Thanks!

PS - If you are running on Snow Leopard, please make sure you are using Timbuktu 8.8 -- there are incompatibilities between SL and earlier versions of Timbuktu (albeit nothing like a loginwindow crash)

Reply