apple remote desktop 3.9 client access denied
Since upgrade to apple remote desktop, access to all clients is denied (os sierra pre touch bar throughout). What remedies should be considered?
MacBook Pro (13-inch Mid 2012), macOS Sierra (10.12.3)
Since upgrade to apple remote desktop, access to all clients is denied (os sierra pre touch bar throughout). What remedies should be considered?
MacBook Pro (13-inch Mid 2012), macOS Sierra (10.12.3)
The short name is not the only problem! All my computers have ALWAYS used short name and none of them work when upgraded to 3.9. I have reinstalled Sierra on the client computers, re-attched them to ARD, and as soon as they are upgraded they lost the ability to SEND UNIX, COPU, INSTALL etc, i.e. Screen Sharing only.
I have disabled and reenabled the client using Kickstart commands.
I have unistalled ARD Amin and all its prefs and renistalled it.
Nightmare! No solution in sight.
Come on Apple!
The only way I managed to resolve this issue was to create a new admin user account on the remote client and re-authenticate (delete or edit details of the the connection) with new details. This then sorted the access denied issue.
I have the same problems - updating the admin machine to Remote Desktop 3.9 - program and client.
After that no connection to all clients. Changing the preference and select to connect to clients running old software is than working with older clients,
but it has no effects to several clients with Version 3.9
After a while and several tries the following works:
navigate to the client and change the account name to lowercase letters and one word,
similar to the unix account names of the client.
It seems to be an authentication bug at the client account names with spaces.
Example:
account name: Telly Savalas
internal Unix / Apple account name and user folder: tellysavalas
Best wishes to all…
Ingo
The problem with Remote Desktop version 3.9 is that account names with spaces and possibly other punctuation such as apostrophes are not recognized properly.
You need to login to the remote computer with either:
Then on the computer you are running Remote Desktop, select All Computers in the left column. Then right-click (tap with 2 fingers) the computer you want to access, select Get info, and then under the Attributes, change the login name to the remote computer's account name without spaces. This should resolve the problem of denied access via Remote Desktop 3.9 (assuming the password is correct).
Or forget Remote Desktop, and instead use Finder, select the shared computer in the left column you want to access, and then select the Share Screen feature. Then login. That method still worked for me, even though I was denied access to the same remote computers via the Remote Desktop app. Go figure.
Note: I had to use the Finder method (share screen) to even get to the remote Mac's in order to fix the problems with Remote Desktop 3.9. I've had similar problems in the past (prior to Yosemite if my memory is correct), and I suspect these are due to the underlying Unix requirement of computer account names that don't have spaces or single quotes as part of the name--causes parsing problems since these characters serve as delimiters in certain contexts. Sigh...
twiph wrote:
The problem with Remote Desktop version 3.9 is that account names with spaces and possibly other punctuation such as apostrophes are not recognized properly.
You need to login to the remote computer with either:
- the shortened username when the account was created (i.e., Pat Smith would get the default shortened account name of patsmith), or
- create a new account with admin privileges and login to that new account via Remote Desktop.
Then on the computer you are running Remote Desktop, select All Computers in the left column. Then right-click (tap with 2 fingers) the computer you want to access, select Get info, and then under the Attributes, change the login name to the remote computer's account name without spaces. This should resolve the problem of denied access via Remote Desktop 3.9 (assuming the password is correct).
Or forget Remote Desktop, and instead use Finder, select the shared computer in the left column you want to access, and then select the Share Screen feature. Then login. That method still worked for me, even though I was denied access to the same remote computers via the Remote Desktop app. Go figure.
Note: I had to use the Finder method (share screen) to even get to the remote Mac's in order to fix the problems with Remote Desktop 3.9. I've had similar problems in the past (prior to Yosemite if my memory is correct), and I suspect these are due to the underlying Unix requirement of computer account names that don't have spaces or single quotes as part of the name--causes parsing problems since these characters serve as delimiters in certain contexts. Sigh...
I used the shortform login ID's to temporarily solve the problem but it comes back in spades. What's worse is that i maintain over a hundred computers around the world remotely and this has turned into an absolute catastrophe for me.
I found that after updating the ARD application and all the remote clients, I had to re-enter the credentials to each computer in ARD by getting Info on each one and edit the username/password. If the remote boxes are old version of the OS, also set under the ARD preferences in Security to support older versions.
A lot of hoops to jump through for what should have been a simple upgrade. Shame on you Apple.
Thanks mate, it worked for me. I think may be helpful to someone to know how to change "internal Unix / Apple account name and user folder".
Go to:
System Preference ->
Users and groups ->
Enable changes (turn lock up) ->
Right click on the account name ->
Advanced option ->
change the field "Full Name" as Sub_Light_Speed said.
I'm not sure about right translation cause my macOS isn't in English. Sorry for that.
Internet Gypsy's solution is what finally worked. I created a new Administrator account and used that login info for setting up the client computer and thankfully that solved the problem. Thanks Internet Gypsy!!
I was having the same problem, and after talking with Apple Support, we were able to work around this by making sure that the login information is using the short name of the client instead of the long name. For example, say the client has a login of "Patty Smith" and the short name is "pattysmith", the login settings for that client in Remote Desktop 3.9 must use the short name "pattysmith" otherwise access will be denied.
After discussing the same problem I had with Apple Support, we were able to resolve the problem by making sure we were using the short version of the client user names. For example, if the user name on the client computer is "Patty Smith" with the short version "pattysmith", and in my case I was using the long names, by changing the logins to the short names, I was able to connect.
I wasn't having trouble connecting to older versions of clients after checking the "Allow communication with older clients box in the preferences." But I was having trouble once those clients upgraded to the new ARD 3.9. I was repeatedly getting access denied messages.
I did some digging and was able to get consistent connections after doing the following:
1. Go to the client mac > mac hd > users - and note the exact name of the user home folder.
2. Go back to ARD on the control mac and delete the offending access denied client from the "All Computers" tab.
3. Go to the ARD Scanner tab > connect to the desired client > on the login screen use the previously noted user home folder name exactly as it appeared on the clients system as the user name, and enter the password.
This worked for me every time I tried to connect to an updated 3.9 ARD client. Hopefully it helps someone else.
I wish the update to 3.9 would have been more straightforward, but glad to have it working.
Yep... this is what did the trick.
I did two things here:
1) created a new user Admin (Administrator) in the remote client
2) went to Users and group and change the Account Name (from Administrator to administrator)
a few things to do here:
- change Account name, not Full Name
- on the remote administrator EDIT the entry for the remote client on where you just created the new user
- make sure the entry for login matches the Account Name above (might as well check the password)
Should work...
PS: the entry in the Remote Desktop Administrator still shows Access Denied on mine, but it works without major problems... Would love not to have to jump through hoops here...
sub_light_speed is CORRECT !!!
The issue is the spaces in the name.
You do not need to make another user account or change the name of the account.
You Only need to use the short name of the account, which is in small letters and no spaces.
IT WORK !!!
Thank you sub-light_speed
No, the answer is even easier. First quit Apple Remote Desktop (ARD).
Go to Hard Drive > Library > Preferences and put the apple.com.RemoteDesktop.plist into the trash. Then restart ARD.
You should now have access to the devices on your list.
We already had all lower case and no spaces in the name, and it still would get "Access Denied" - though I could still control the remote system. Remove the computer from the "All Computers" and re-adding it removed the "Access Denied", but we still can't perform any tasks (Copy Items, Unix commands), as it gives a "not authorized" error.
apple remote desktop 3.9 client access denied