User manual APPLE REMOTE DESKTOP 3.1 - ADMINISTRATOR GUIDE

Apple Remote Desktop Administrator's Guide Version 3.1 K Apple Computer, Inc. © 2006 Apple Computer, Inc. All rights reserved. The owner or authorized user of a valid copy of Apple Remote Desktop software may reproduce this publication for the purpose of learning to use such software. No part of this publication may be reproduced or transmitted for commercial purposes, such as selling copies of this publication or for providing paid for support services. The Apple logo is a trademark of Apple Computer, Inc., registered in the U.S. and other countries. Use of the "keyboard" Apple logo (Option-Shift-K) for commercial purposes without the prior written consent of Apple may constitute trademark infringement and unfair competition in violation of federal and state laws. Apple, the Apple logo, AirPort, AppleScript, AppleTalk, AppleWorks, FireWire, iBook, iMac, iSight, Keychain, Mac, Macintosh, Mac OS, PowerBook, QuickTime, and Xserve are trademarks of Apple Computer, Inc., registered in the U.S. and other countries. Apple Remote Desktop, Bonjour, eMac, Finder, iCal, and Safari are trademarks of Apple Computer, Inc. Adobe and Acrobat are trademarks of Adobe Systems Incorporated. Java and all Java-based trademarks and logos are trademarks or registered trademarks of Sun Microsystems, Inc. in the U.S. and other countries. UNIX is a registered trademark in the United States and other countries, licensed exclusively through X/Open Company, Ltd. 019-0835/11-13-06 3 Contents Preface 9 10 10 10 11 13 13 15 18 21 23 23 25 27 28 28 29 31 32 33 34 35 36 36 36 37 39 39 40 40 41 About This Book Using This Guide Remote Desktop Help Notation Conventions Where to Find More Information About Apple Remote Desktop Using Apple Remote Desktop Administering Computers Deploying Software Taking Inventory Housekeeping Supporting Users Providing Help Desk Support Interacting with Students Finding More Information Getting to Know Remote Desktop Remote Desktop Human Interface Guide Remote Desktop Main Window Task Dialogs Control and Observe Window Multiple-Client Observe Window Report Window Changing Report Layout Configuring Remote Desktop Customizing the Remote Desktop Toolbar Setting Preferences for the Remote Desktop Administrator Application Interface Tips and Shortcuts Installing Apple Remote Desktop System Requirements for Apple Remote Desktop Network Requirements Installing the Remote Desktop Administrator Software Setting Up an Apple Remote Desktop Client Computer for the First Time Chapter 1 Chapter 2 Chapter 3 3 41 42 42 43 43 44 46 46 46 47 48 Chapter 4 49 49 50 51 51 52 53 53 54 54 55 55 55 56 56 57 57 58 58 Chapter 5 60 60 62 63 63 66 66 67 Upgrading the Remote Desktop Administrator Software Upgrading the Client Software Method #1--Remote Upgrade Installation Method #2--Manual Installation Upgrading Apple Remote Desktop Clients Using SSH Creating a Custom Client Installer Considerations for Managed Clients Removing or Disabling Apple Remote Desktop Uninstalling the Administrator Software Disabling the Client Software Uninstalling the Client Software from Client Computers Organizing Client Computers Into Computer Lists Finding and Adding Clients to Apple Remote Desktop Computer Lists Finding Clients by Using Bonjour Finding Clients by Searching the Local Network Finding Clients by Searching a Network Range Finding Clients by Network Address Finding Clients by File Import Making a New Scanner Making and Managing Lists About Apple Remote Desktop Computer Lists Creating an Apple Remote Desktop Computer List Deleting Apple Remote Desktop Lists Creating a Smart Computer List Editing a Smart Computer List Creating a List of Computers of from Existing Computer Lists Importing and Exporting Computer Lists Transferring Computer Lists from Apple Remote Desktop 3 to a New Administrator Computer Transferring Remote Desktop 2 Computer Lists to a New Remote Desktop 3 Administrator Computer Transferring Old v1.2 Computer Lists to a New Administrator Computer Understanding and Controlling Access Privileges Apple Remote Desktop Administrator Access Setting Apple Remote Desktop Administrator Access Authorization and Privileges Using Local Accounts Apple Remote Desktop Administrator Access Using Directory Services Creating Administrator Access Groups Enabling Directory Services Group Authorization Apple Remote Desktop Guest Access Apple Remote Desktop Nonadministrator Access 4 Contents 68 69 69 70 70 Chapter 6 72 72 73 74 74 76 76 77 78 79 79 80 81 81 81 82 82 82 83 83 84 85 86 86 88 89 89 89 91 91 92 92 93 93 93 94 Virtual Network Computing Access Command-Line SSH Access Managing Client Administration Settings and Privileges Getting an Administration Settings Report Changing Client Administrator Privileges Setting Up the Network and Maintaining Security Setting Up the Network Using Apple Remote Desktop with Computers in an AirPort Wireless Network Getting the Best Performance Maintaining Security Remote Desktop Authentication and Data Transport Encryption Encrypting Observe and Control Network Data Encrypting Network Data During Copy Items and Install Packages Tasks Interacting with Users Controlling Controlling Apple Remote Desktop Clients Control Window Options Switching the Control Window Between Full Size And Fit-To-Window Switching Between Control and Observe Modes Sharing Control with a User Hiding a User's Screen While Controlling Capturing the Control Window to a File Switching Control Session Between Full Screen and In a Window Sharing Clipboards for Copy and Paste Controlling VNC Servers Setting up a Non­Mac OS X VNC Server VNC Control Options Configuring an Apple Remote Desktop Client to be Controlled by a VNC Viewer Observing Changing Observe Settings While Observing Changing Screen Titles While Observing Viewing a User's Account Picture While Observing Viewing a Computer's System Status While at the Observe Window Shortcuts in the Multiple Screen Observe Window Observing a Single Computer Observing Multiple Computers Observing a Computer in Dashboard Sending Messages Sending One-Way Messages Interactive Chat Viewing Attention Requests Chapter 7 Contents 5 94 94 95 95 95 96 96 Chapter 8 97 97 98 99 99 99 100 100 101 102 102 102 104 105 106 106 108 108 110 110 111 113 113 114 115 116 118 120 121 126 127 128 129 129 130 Sharing Screens Sharing a Screen with Client Computers Monitoring a Screen Sharing Tasks Interacting with Your Apple Remote Desktop Administrator Requesting Administrator Attention Canceling an Attention Request Changing Your Observed Client Icon Administering Client Computers Keeping Track of Task Progress and History Enabling a Task Notification Script Getting Active Task Status Using the Task Feedback Display Stopping a Currently Running Task Getting Completed Task History Saving a Task for Later Use Creating and Using Task Templates Editing a Saved Task Installing Software Using Apple Remote Desktop Installing by Package and Metapackage Installing Software on Offline Computers Installing by Using the Copy Items Command Using Installers from Other Companies Upgrading Software Copying Files Copy Options Copying from Administrator to Clients Copying Using Drag and Drop Restoring Items from a Master Copy Creating Reports Collecting Report Data Using a Task Server for Report Data Collection Report Database Recommendations and Bandwidth Usage Auditing Client Usage Information Finding Files, Folders, and Applications Comparing Software Auditing Hardware Testing Network Responsiveness Exporting Report Information Using Report Windows to Work with Computers Maintaining Systems Deleting Items Emptying the Trash 6 Contents 130 131 131 132 133 133 134 135 135 137 137 138 139 139 140 140 141 141 142 142 143 144 144 145 146 146 148 148 150 Chapter 9 156 156 157 157 158 159 159 160 161 161 161 162 162 Setting the Startup Disk Renaming Computers Synchronizing Computer Time Setting Computer Audio Volume Repairing File Permissions Adding Items to the Dock Changing Energy Saver Preferences Changing Sharing Preferences for Remote Login Setting Printer Preferences Managing Computers Opening Files and Folders Opening Applications Quitting Applications Without Logging Out the User Putting a Computer to Sleep Waking Up a Computer Locking a Computer Screen Displaying a Custom Picture on a Locked Screen Unlocking a Computer Screen Disabling a Computer Screen Logging In a User at the Login Window Logging Out the Current User Restarting a Computer Shutting Down a Computer Starting Up a Computer UNIX Shell Commands Send UNIX Command Templates Executing a Single UNIX Command Executing Scripts Using Send UNIX Command Built-in Command-Line Tools Automating Tasks Working with the Task Server Preliminary Planning for Using the Task Server Setting Up the Task Server Setting Up an Admin Console to Query the Task Server Setting Up Clients to Interface with the Task Server Using Automatic Data Reporting Setting the Client's Data Reporting Policy Creating a Template Data Reporting Policy Working with Scheduled Tasks Setting Scheduled Tasks Editing Scheduled Tasks Deleting Scheduled Tasks Contents 7 162 163 166 Appendix A 167 167 167 168 168 169 169 170 171 171 174 175 175 175 176 176 178 178 179 179 180 180 187 189 Using Scripting and Automation Tools with Remote Desktop Using AppleScript with Remote Desktop Using Automator with Remote Desktop Icon and Port Reference Client Status Icons Apple Remote Desktop Status Icons List Menu Icons Task Status Icons System Status Icons (Basic) System Status Icons (Detailed) TCP and UDP Port Reference Report Field Definitions Reference System Overview Report Storage Report USB Devices Report FireWire Devices Report Memory Report Expansion Cards Report Network Interfaces Report Network Test Report Administration Settings Report Application Usage Report User History Report AppleScript Remote Desktop Suite Classes and Commands for the Remote Desktop Application. PostgreSQL Schema Sample Appendix B Appendix C Appendix D Index 8 Contents What Is Apple Remote Desktop? Apple Remote Desktop is easy-to-use, powerful, open standards-based, desktop management software for all your networked Macs. IT professionals can remotely control and configure systems, install software, offer interactive online help to end users, and assemble detailed software and hardware reports for an entire Mac network. You can use Apple Remote Desktop to:  Manage client computers and maintain, update, and distribute software  Collect more than 200 system-information attributes for any Mac on your network  Store the results in an SQL database and view the information using any of several hardware or software reports  Control and manage multiple computer systems simultaneously, making shutdown, restart, and sending UNIX commands fast and easy  Provide help and remote assistance to users when they encounter problems  Interact with users by sending text messages, observing and controlling users' screens, and sharing their screens with other client users You can use Apple Remote Desktop to manage your client systems. IT administrators use Remote Desktop in education and business to simplify and empower the management of their organizations computer assets. For system administrators, Apple Remote Desktop can be used to administer large numbers of servers, like a virtual Keyboard-Video-Mouse (KVM) sharing unit. In computer administration environments, it's the ideal solution for managing remote systems, reducing administration costs, and increasing productivity. Apple Remote Desktop can also be used by educators to facilitate instruction in computer labs or one-on-one learning initiatives. Used in a classroom, Apple Remote Desktop enhances the learning experience and allows teachers to monitor and control students' computers. Preface 9 About This Book Using This Guide The Apple Remote Desktop Administrator's Guide contains chapters to help you use Remote Desktop. It contains overviews and explanations about Apple Remote Desktop's features and commands. It also explains how to install and configure Apple Remote Desktop on clients, how to administer client computers, and how to use Remote Desktop to interact with computer users. This guide is provided on the Apple Remote Desktop installation disc and on the Apple Remote Desktop support website as a fully searchable, bookmarked PDF file. You can use Apple's Preview application or Adobe (Acrobat) Reader to browse the contents of this guide as well as search for specific terms, features, or tasks. Remote Desktop Help Remote Desktop Help is available using Help Viewer. To open Remote Desktop Help, choose Help > Remote Desktop Help. The help files contain the same information found in this guide, and are useful when trying to accomplish a task when this guide is unavailable. Additionally, the Remote Desktop Help contains new information, corrections, and latebreaking information about Apple Remote Desktop. The most up-to-date information is available through Remote Desktop Help before it's available on the web as an updated PDF file. Notation Conventions This guide and Remote Desktop Help contain step-by-step procedures to help you use Remote Desktop's commands effectively. In many tasks shown in this manual and in Remote Desktop Help, you need to choose menu commands, which look like this: Choose Edit > Clear. The first term after Choose is the name of a menu in the Remote Desktop menu bar. The next term (or terms) are the items you choose from that menu. 10 Preface About This Book Terminal Command Conventions Notation monospaced font $ [text_in_brackets] (one|other) underlined [...] Indicates A command or other Terminal text A shell prompt An optional parameter Alternative parameters (type one or the other) A parameter you must replace with a value A parameter that may be repeated A displayed value that depends on your configuration or settings Commands or command parameters that you might type, along with other text that normally appears in a Terminal window, are shown in this font. For example: You can use the doit command to get things done. When a command is shown on a line by itself as you might type it in a Terminal window, it follows a dollar sign that represents the shell prompt. For example: $ doit To use this command, type "doit" without the dollar sign at the command prompt in a Terminal window, then press the Return key. Where to Find More Information About Apple Remote Desktop For additional information related to Apple Remote Desktop, try these resources. You'll find more information in the Apple Remote Desktop Read Me file and on the Apple Remote Desktop website: www.apple.com/remotedesktop/ You can find the most recent edition of the Apple Remote Desktop Administrator's Guide at:  the Apple Server Division Documentation page www.apple.com/server/documentation/  the Remote Desktop section of Apple.com, and www.apple.com/remotedesktop/  the Help Menu in the Remote Desktop application Preface About This Book 11 The Apple Remote Desktop Support website provides a database of technical articles about product issues, use, and implementation: www.apple.com/support/remotedesktop/ To provide feedback about Apple Remote Desktop, visit the feedback page: www.apple.com/feedback/remotedesktop.html For details about how to join the Apple Remote Desktop Mailing list, visit: lists.apple.com/mailman/listinfo/remote-desktop/ To share information and learn from others in online discussions, visit the Apple Remote Desktop Discussions Forum: discussions.info.apple.com/appleremotedesktop/ For more information about PostgreSQL go to: www.postgresql.org For more information about using Apple products for IT professionals go to: apple.com/itpro/ 12 Preface About This Book 1 Using Apple Remote Desktop 1 Apple Remote Desktop helps you keep Macintosh computers and the software running on them up to date and trouble free. And it lets you interact directly with Macintosh users to provide instructional and troubleshooting support. This chapter describes the main aspects of Apple Remote Desktop's administration and user interaction capabilities and tells you where to find complete instructions for using them. Administering Computers Apple Remote Desktop lets you perform a wide range of client hardware and software administrative activities remotely, from an administrator computer (a computer on which administrator software resides):  Keep users' software up to date by using Apple Remote Desktop to deploy software and related files to client computers.  Create reports that inventory the characteristics of client computer software and hardware.  Use Apple Remote Desktop's remote administration capabilities to perform housekeeping tasks for client computers. 13 You can administer client computers individually, but most Apple Remote Desktop features can be used to manage multiple computers at the same time. For example, you may want to install or update the same applications on all the computers in a particular department. Or you may want to share your computer screen to demonstrate a task to a group of users, such as students in a training room. Marketing department Engineering department To manage multiple computers with a single action, you define Apple Remote Desktop computer lists. A computer list is a group of computers that you want to administer similarly. Computer lists let you group and organize computers for administration. Setting up computer lists is easy; you simply scan the network or import the identity of computers from files. A particular computer can belong to more than one list, giving you a lot of flexibility for multicomputer management. A computer can be categorized by its type (laptop, desktop), its physical location (building 3, 4th floor), its use (marketing, engineering, computing), and so forth. Once you've set up computer lists, you can perform most of the computer administration activities described next for groups of client computers. 14 Chapter 1 Using Apple Remote Desktop Deploying Software Apple Remote Desktop lets you distribute software and related files to client computers from your Apple Remote Desktop administrator computer or from a computer running Mac OS X Server. Deploy configuration files Deploy drag-and-drop application folders Deploy install packages (.pkg or .mpkg) Deploy UNIX shell scripts Administrator computer Mac OS X Server Set startup partition Network install images NetBoot images Xserve cluster node Marketing department Engineering department Distributing Installer Packages You can distribute and automatically install packages in .pkg and .mpkg formats. Apple Remote Desktop lets you install software and software updates on one or more client computers without user interaction or interruption, or even if no user is logged in. After installation, Apple Remote Desktop erases the installer files. If the computers need to be restarted, as they do following an operating system update, you can restart them from Apple Remote Desktop. Chapter 1 Using Apple Remote Desktop 15 For example, you can use Apple Software Update to download an iCal update or an operating system update to a test computer. If the update works as expected and introduces no compatibility issues, copy the installer package to the administrator computer to distribute to computers that need upgrading. Note that this approach conserves Internet bandwidth, because only one copy of the package needs to be downloaded. You can also use Apple Remote Desktop to deploy new versions of computational software to Xserve computers in a cluster node. You can use the PackageMaker tool (included on the Apple Remote Desktop installation CD and with Apple's developer tools) to create your own installer packages, such as when you want to:  Distribute school project materials or business forms and templates  Automate the installation of multiple installer packages  Deploy custom applications Before performing remote installations, you can send an Apple Remote Desktop text message to notify users, perhaps letting them know that you'll be using Apple Remote Desktop to lock their screens at a particular time before you start the installation. Using Network Install Images You can also distribute and install software, including the Mac OS X operating system, by using Network Install images. On Mac OS X Server, use the Network Image Utility to create a Network Install image. You can create the image by cloning a system that's already installed and set up, or by using an installation disc or an image downloaded using Apple Software Update. If you choose to auto-install, you won't have to interact with each computer. On the Apple Remote Desktop administrator computer, set the startup disk of remote client systems to point to the Network Install image, and then remotely reboot the clients to initiate installation. Before initiating installations that require computers to be restarted afterwards, send an Apple Remote Desktop text message to client users to notify them of a pending installation. For example, tell users you'll log them off at 5:00 p.m. to install an operating system update. Using NetBoot Images Another kind of system image you can create using Mac OS X Server is a NetBoot image. Like a Network Install image, a client computer uses NetBoot images to start up. Unlike a Network Install image, the boot software is not installed on the client system. Instead, it resides on a remote server. It is recommended you use a NetBoot image that has Apple Remote Desktop installed and configured. Otherwise, administering the computer using Apple Remote Desktop after starting up from NetBoot is impossible. 16 Chapter 1 Using Apple Remote Desktop Client computers that boot from a NetBoot image get a fresh system environment every time they start up. For this reason, using NetBoot images is useful when a particular computer is shared by several users who require different work environments or refreshed work environments, or when you want to start a new experiment or use a different computing environment in a cluster node. You can use Apple Remote Desktop to set the startup disks of client systems to point to the NetBoot image, and then restart the systems remotely using Apple Remote Desktop. Users can also choose a NetBoot image for startup by using the Startup Disk pane of System Preferences. With just a few clicks you can reconfigure all the computers in a lab or cluster without having to manually restart and configure each computer individually. Distributing Preference Files Managed computers often require a standard set of preferences for each instance of an application. Use Apple Remote Desktop to distribute preference files when you need to replace or update application preferences. For example, you can copy a standardized preference file to the currently logged in user's Library/Preferences folder. Using UNIX Shell Scripts You can use Apple Remote Desktop to distribute and run UNIX shell scripts on client computers. For example, a script can mount an AFP server volume, from which it downloads a disk image to client computers. The script might also download an installer package and then perform a command-line installation. On an Xserve in a cluster node, you could also run a script that mounts an Xserve RAID disk designed for high throughput and then downloads large data sets for processing. You can also use Apple Remote Desktop to distribute AppleScript files that automate PDF workflows, or job instructions for computational clusters. Distributing Drag-and-Drop Applications You can distribute and install self-contained (drag-and-drop) applications by copying them to one or more client computers. Use this approach, for example, to distribute application updates. Verifying Installations To check whether an installation has been completed successfully, use Apple Remote Desktop's remote control capabilities. For example, you can start an application remotely, or search for particular files. You can also use the File Search report to verify that all files for an application are installed correctly. Chapter 1 Using Apple Remote Desktop 17 Taking Inventory Apple Remote Desktop lets you capture data describing the attributes of client computers, then generate reports based on the data. You specify how often you want to capture data, the data you want to capture, and the computers you want to profile. You can collect data just before generating a report if you need up-to-the-minute information. Or you can schedule data to be collected by Apple Remote Desktop at regular intervals and stored in its built-in SQL (Structured Query Language) database for use on an as-needed basis. You can also specify where you want the database to reside--on the local administrator computer, or on a server where the Apple Remote Desktop administrator software is installed and always running, so data can be captured on an ongoing basis. Administrator computer Mac OS X Server ARD SQL database SQL tools ARD SQL database Xserve cluster node Marketing department Engineering department Using the collected data, Apple Remote Desktop generates reports tailored to your specifications. 18 Chapter 1 Using Apple Remote Desktop File Search Report Use the File Search report to search client systems for specific files and folders and to audit installed applications. This report can help you find out how many copies of a particular application are in use so you don't violate license agreements. Spotlight File Search Use the Spotlight Search report to search Tiger client systems for specific files and folders. The information in the report is updated as files matching your search change on the client systems. Software Version Report Use the Software Version report to make sure that all users have the latest application versions appropriate for their systems. Software Difference Report Use the Software Difference report to detect application versions that are out of date, nonstandard, or unacceptable. You can also learn whether a user has installed an application that shouldn't be installed. System Overview Report The System Overview report makes visible a wide variety of client computer characteristics. Using this report, you can review information about a client's AirPort setup, computer and display characteristics, devices, network settings, system preferences, printer lists, and key software attributes. There are numerous uses for this report, such as identifying problems or verifying system configurations before installing new software, or determining how many devices of a particular type (such as scanners) are in a particular lab. Hardware Reports Several reports provide details about particular hardware used by client computers-- storage, FireWire devices, USB devices, network interfaces, memory, and expansion cards. Use these reports to determine, for example, which computers need more memory, which computer has the fastest processor speed, and how much free space is left on a particular disk. Chapter 1 Using Apple Remote Desktop 19 Administration Settings Report Use the Administration Settings report to determine which Apple Remote Desktop administrator privileges are enabled or disabled for you in the Sharing pane of System Preferences on individual client computers. User History Report Use the User History report to show you who has logged in to a client, how they logged in, and for how long. Application Usage Report Use the Application Usage report to find out which applications have been running on your client computers and who ran those applications. Network Test Report A Network Test report helps you measure and troubleshoot the communication between your administrator computer and your client computers. The Network Interfaces report might also help troubleshooting network hardware issues. Use this report to help identify reasons for network communication problems that could affect Apple Remote Desktop. For example, if you're unable to copy items to particular client computers from the administrator computer, you may find you have a bad connection to the computers. Using this information can help you isolate the problem to a particular cable or hub. Generating Your Own Reports Because the Apple Remote Desktop database is in standard SQL format, you can also use your favorite SQL scripts to query, sort, and analyze the collected data. In addition, you can export data from the database into a file so you can import it for viewing in a different program, such as a spreadsheet application. 20 Chapter 1 Using Apple Remote Desktop Housekeeping Apple Remote Desktop provides several ways to remotely control client computers for housekeeping activities, which you can conduct using one or more Apple Remote Desktop windows. Restart/ shutdown/sleep Empty Trash Remote screen control Execute UNIX shell script Send text notification Administrator computer Mac OS X Server Set startup partition NetBoot images Xserve cluster node Marketing department Engineering department Chapter 1 Using Apple Remote Desktop 21 Managing Power State Use Apple Remote Desktop to control the power state of client computers. For example, you may need to have all computers turned off during maintenance of a power generation unit or during a holiday shutdown. You can send an Apple Remote Desktop text message reminding users to shut down their computers at a particular time. Any computers still running when you need to start maintenance can be detected and shut down remotely with Apple Remote Desktop. Locking Computer Screens You can lock the screens of client computers for specified durations when you don't want the computers to be used. For example, you may need to perform network maintenance and want to make sure computers don't use the network for a few hours. You can display custom pictures or text messages on locked computer screens to let users know when the computers are available again. Reclaiming Disk Space Periodically empty the Trash on client computers to conserve disk space. Automating Periodic Maintenance Use AppleScript and UNIX shell scripts to automate periodic maintenance, such as checking permissions or deleting log files. Controlling Screens Use Apple Remote Desktop's remote screen control to perform activities on the desktop of Xserve computers, or use graphical applications on them. Apple Remote Desktop replaces the need for KVM (keyboard-video-mouse) switches for accessing Xserve computers without a monitor attached. You can also remotely control a user's computer to help determine reasons for slow performance or other problems. Changing Startup Disks Change the startup disk of a client computer to perform diagnostic or troubleshooting activities. For example, start up a computer using a server-based NetBoot image that's been set up for troubleshooting. When you're finished, reset the startup disk to the original boot volume. Managing Shared Computers On computers that are shared among users, check for files that need to be deleted, close applications, log users off, or perform other activities needed to prepare computers for the next users. 22 Chapter 1 Using Apple Remote Desktop Supporting Users Apple Remote Desktop lets you interact with users from your administrator computer in these ways:  Provide help: respond to users who need help by using Apple Remote Desktop to receive user requests and to remotely diagnose and fix problems.  Interact: conduct instructional interactions with students in a school or corporate training environment--from controlling or observing student screens to sharing your screen with all your students in order to perform a demonstration. Providing Help Desk Support When a user is having trouble, Apple Remote Desktop provides several ways to interact with the user and his or her computer to diagnose and fix the problem. Administrator computer Use text chat Copy items Control, observe, and share screens Marketing department Engineering department Chapter 1 Using Apple Remote Desktop 23 Requesting Help A user can discreetly notify you of a problem by sending a request for help using an Apple Remote Desktop text message. Users initiate requests using the commands in the menu that appears when they click the Apple Remote Desktop icon in the menu bar. A notification on the administrator computer alerts you to the message, and you can use several techniques to obtain more information and troubleshoot the problem. Chatting with the User Conduct two-way Apple Remote Desktop text communication with the user to obtain more information. Screen Monitoring Use Apple Remote Desktop to observe the user's screen if you need more details to understand the problem. Screen Controlling Use Apple Remote Desktop to control the user's screen in order to diagnose and fix the problem. You may have unlimited control, or a user can grant you temporary guest access so you can control the computer only during troubleshooting. There are two levels of control available. You can take complete control of the user's computer, or you can share control of the keyboard and mouse with the user. Screen Sharing If the problem is caused by incorrect actions by the user, share your screen with the user as you demonstrate the correct way to perform the action. Using Reports Use hardware and software reports as diagnostic tools to determine whether the client computer setup is part of the problem. For example, if a user can't save his or her work, the storage report can help you determine whether it's a disk space issue. Deploying New Software or Files If software or configuration settings are part of the problem, use Apple Remote Desktop to copy new configuration files, installer packages, or other items to client computers. 24 Chapter 1 Using Apple Remote Desktop Interacting with Students Apple Remote Desktop helps instructors teach more efficiently by letting them interact with student computers individually or as a group. Broadcast text messages Observe and share one or multiple screens Control screen Lock screens Log out students Distribute items electronically Open applications or files One-to-one help desk support Administrator computer Classroom Using Text Messages Send Apple Remote Desktop text messages to communicate with students. For example, notify them that a classroom activity will start soon or that they have ten minutes to finish an examination. Monitoring Student Computers View student computer screens on your computer, so you can monitor student activities or assess how well they're able to perform a particular task. You can also monitor the applications running on any student's computer. Sharing Screens Display your screen or a student's screen on other student computers for training and demonstration purposes. Chapter 1 Using Apple Remote Desktop 25 Controlling Screens Show students how to perform tasks by controlling their screens from your computer, opening applications and using files as required. Locking Screens Lock student screens to prevent students from using their computer when you want them to focus on other activities. Terminating Computer Use Remotely log students out or shut down their computers at the end of a class or school day. Distributing and Collecting Files Distribute handouts electronically, at a time that won't disrupt class activities or when they're needed for the next class activity, and collect homework files. Automating Website Access Open a webpage on all student computers. Drag a URL from Safari to your desktop, then copy it to student computers and open it in Safari. You can also copy files and open them in the appropriate applications on student computers. Providing One-to-One Assistance Provide help when a student needs it, conducting private and discreet computer-tocomputer interactions. 26 Chapter 1 Using Apple Remote Desktop Finding More Information You'll find detailed instructions for performing the tasks highlighted in this chapter-- and more--throughout this manual. To learn more about Remote Dekstop interface Computer lists Apple Remote Desktop administration Controlling screens Observing screens Deploying software Distributing files Taking inventory See information for Window and icon functions Creating computer lists Administrator privileges Administrator computers Controlling Observing Installing software Upgrading software Copying files Data collection options Auditing software Auditing hardware Network responsiveness Customizing reports Exporting report data User login accounting Application usage Deleting items Emptying the Trash Setting startup volumes Renaming computers Sleeping and waking Locking screens Logging users out Restart and shutdown Configuring data gathering Scheduling tasks Using UNIX shell scripts Starting on page page 28 page 49 page 60 page 79 page 86 page 102 page 108 page 113 Client use reporting Housekeeping tasks page 116 page 129 Automating tasks page 156 Additional information is available at several Apple websites:  For information about NetBoot and Network Install, download the system imaging administration guide at: www.apple.com/server/documentation/  You can find the Software Delivery Guide on the Apple Developer Connection website at: developer.apple.com/referencelibrary/ Chapter 1 Using Apple Remote Desktop 27 2 Getting to Know Remote Desktop 2 Remote Desktop is the administrator application for Apple Remote Desktop. Its attractive interface is powerful, yet simple to use. Remote Desktop's interface is customizable, allowing you to get the information you want quickly, the way you want it. This chapter contains screenshots and short descriptions of Remote Desktop's interface, as well as detailed instructions for customizing the appearance and preferences of the application. You will learn about:  "Remote Desktop Human Interface Guide" on page 28  "Configuring Remote Desktop" on page 36  "Interface Tips and Shortcuts" on page 37 Remote Desktop Human Interface Guide The following sections give basic information about the human interface of Remote Desktop, Apple Remote Desktop's administrator application.  "Remote Desktop Main Window" on page 29  "Task Dialogs" on page 31  "Control and Observe Window" on page 32  "Multiple-Client Observe Window" on page 33  "Report Window" on page 34  "Changing Report Layout" on page 35 28 Remote Desktop Main Window The main window of Remote Desktop has a customizable toolbar, groups of lists, tasks, and scanners on the left, and the main window area to the right. "List Menu Icons" on page 168 contains icons seen in the list menu of the main window. K L A B C D E F G I H J A All Computers list: The All Computers list is a list of all client computers that you plan to administer. It includes all the clients you have authenticated to, as well as the client computers that you plan to authenticate to. Computers need to be in the All Computers list before you can command or administer them. If you have a 10-client license, the All Computers list can contain only 10 computers. Apple Remote Desktop computer lists: A list of computers you create to group computers in ways that are convenient for you. Any list is a subset of the client computers in the All Computers list. If you add a computer directly to a computer list, it is added automatically to the All Computers list as well. Smart computer lists: A smart computer list is a list of computers which is a subset of the client computers in the All Computers list that meet a predetermined criteria. Smart Computer lists update themselves based on your criteria compared to the contents of the All Computers list. Group folders: Groups are tools to help you organize all your possible lists, tasks, and scanners. Groups look like folders, and can be collapsed to hide the group contents. Saved tasks: Saved tasks are listed in the left portion of the main window. They have the icon of the type of task and have a user-changeable name. Scanner: Scanners find clients to add to the All Computers list. You can make new scanners and customize them for your needs. See "Making a New Scanner" on page 53. B C D E F Chapter 2 Getting to Know Remote Desktop 29 G Task server list: This lists tasks delegated to the Task Server, rather than run those run directly from the application. When all the target computers have come online and participated in the task, the task is labeled as complete. Active tasks list: This list shows all tasks that are currently running or scheduled and uncompleted. History list: The History list shows a list of most recently run tasks, as defined in the Remote Desktop preferences. You can inspect each task by double-clicking it. Once a task is completed (whether successfully or not) it is moved to the History list. Task status icon: These icons represent the current state of a task. See "Task Status Icons" on page 168. Client status icon: Icon representing the current state of a client computer. See "Client Status Icons" on page 167. Customizable toolbar: The toolbar can be fully customized with icons of your most-used Apple Remote Desktop features. H I J K L 30 Chapter 2 Getting to Know Remote Desktop Task Dialogs When you click a task, a dialog appears to let you set task parameters or confirm the task. A B G C D E F A B C D E Task type header: This header area shows you the kind of task represented. Saved task name: When you save a task, you name it for your own use. Task configuration area: This area is different for every task. It's where you set operating parameters for the task to be performed. Participating computers: This area shows you the computers that will be affected by the task. You can add or remove computers in this area without changing computer list membership. Schedule task button: When you click this button in a task dialog, you can set a time to perform the task as well as repeat the task. See "Working with Scheduled Tasks" on page 161 for more information. Save task button: When you click this button in a task dialog, you can name and save the task as configured. Saved tasks appear in the left side of Remote Desktop's main window. Task templates: This control allows you to save current task configuration settings, or apply previously saved settings to the current task. These templates are stored on a per-task basis. For example, the Send UNIX Commands template pop-up has an extensive list of built-in templates, while other tasks may have none. F G Chapter 2 Getting to Know Remote Desktop 31 Control and Observe Window This window is the same for both controlling and observing a single client. The only difference is the state of the Observe or Control toggle button. When it's selected, you have control over the remote client. A BCDEF GH I J A B C D E F G Observe or control toggle: When this button is selected, you have control over the remote client. Share mouse control: When this button is selected, you share mouse control with the user. Fit screen in window: When this button is selected, the remote client is scaled to the Control window size. Lock computer screen for control: When this button is selected, the remote client screen shows a lock, and your view allows you to view the client desktop normally. Capture screen to file: When this button is clicked, the remote client screen is saved to a local file at the selected image quality. Fit screen to full display: When this button is selected, your display doesn't show your computer desktop, only that of the remote computer, at full possible resolution. Get clipboard from client: When this button is clicked, the contents of the remote client Clipboard are transferred to the local Clipboard. 32 Chapter 2 Getting to Know Remote Desktop H I J Send clipboard to the client: When clicked, the remote client Clipboard receives the contents of the local Clipboard. Image Quality: Adjusts the screen color depth from black and white to millions of colors. Desktop of Controlled Computer: Resize this window from the lower right corner. Multiple-Client Observe Window When you observe many clients at the same time, they all appear in the same window. If you have more computers than will fit in the window, they are divided across several pages. H A B C I D E F G I A B C D E F Page Delay: Adjusts the number of seconds before automatically advancing to the next page of screens. Computers Per Page: Adjusts the number of client screens visible on each page. Image Quality: Adjusts the screen color depth from black and white to millions of colors. Display Computer Information: Shows the computer information area, which contains desktop titles, account pictures, and status icons. Computer title selector: Changes the titles displayed underneath the client screens (you can choose the computer name, IP address, or hostname). Account picture: Shows the login icon of the currently logged in user. Chapter 2 Getting to Know Remote Desktop 33 G H I J Computer status: Shows basic computer status beneath each client screen. Cycle through pages: Manually advances to the next page of screens. View Options: Reveals the view option controls. Observed computers: Contains the scaled desktops of the observed client computers. Report Window Reports serve as valuable shortcuts when you're copying files and organizing computer lists. C B A C B D E F A B C D Report category: Most reports have subcategories to help you find the information you want. In the report window, you switch between the subcategories using these tabs. Save report to file: Saves the report to a plain text file. Print: Formats and prints the report window. Open selected: Opens the item selected in the report. The item opens on the client computer. 34 Chapter 2 Getting to Know Remote Desktop E F Delete selected: Deletes the item selected in the report from the remote computer. Copy to this computer: Copies selected items to the administrator computer. Changing Report Layout You can customize report layouts for your own purposes. By default, reports include a column for each information type you selected before running the report, in the order presented in the report dialog. The columns in the report are initially sorted by computer name. You can resize or rearrange the columns of a report, as well as sort the rows by column. Additionally, in the File Search report, you can choose what information is displayed about a found item. By default, the item name, kind, parent path, actual size, and modification date are displayed. To change what information is displayed: 1 In the File Search report window, select or deselect each report column as desired. Report column Name Parent path Full path Extension Date modified Date created Actual size Size on disk Kind Invisible Version number Version string Owner Group Permissions Locked If checked, will show The item name The path to the folder that the item is in The full file path The file extension indicating the file type (.app, .zip, .jpg) The last date and time the file was changed and saved The date and time the file was created Actual file size, in kilobytes or megabytes Amount of disk space used by the file, in kilobytes File, folder, or application (including platform: Universal, PowerPC, Intel, or Classic) A checkmark indicating whether it is visible in the Finder If an application, the version reported If an application, the version reported The item owner's short name The item's group name The item's UNIX permissions (for example, -rw-r--r--) A checkmark indicating whether it is a locked file 2 After making your selections, click Generate Report as usual. When the report window appears, you can rearrange the columns or sort by a different column. Chapter 2 Getting to Know Remote Desktop 35 Configuring Remote Desktop You can configure the Remote Desktop administrator application to meet your work needs. Remote Desktop has an interface that is both flexible and functional. Customizing the Remote Desktop Toolbar The Remote Desktop application has a fully customizable toolbar, which provides a quick way to perform tasks. To perform a task, just click the appropriate icon in the toolbar. To show or hide the toolbar, click the toolbar button in the upper-right corner of the application window. You can add, remove, or rearrange the task icons in the toolbar to suit your needs. To customize the application toolbar: 1 Choose Window > Customize Toolbar. 2 Drag your favorite toolbar items or the default set of items to the toolbar. To remove an item, drag it from the toolbar. To rearrange items, drag them into the order you prefer. 3 Choose whether to display toolbar items as text, icons, or both. Selecting "Use Small Size" shrinks the items in the toolbar. Setting Preferences for the Remote Desktop Administrator Application In Remote Desktop preferences, you can select options that affect how the administrator application interacts with client computers. To open the Preferences window:  Choose Remote Desktop > Preferences. In the General pane, you can set:  What double-clicking a client computer does (Get Info, Control, Observe, Text Chat)  Whether to show the client idle time  What warnings may appear when quitting the application  A new serial number  A new Remote Desktop application password In the Control & Observe pane, you can set:  Whether a remote screen is shown in a window or a full screen  Whether control of the mouse and keyboard is shared with the client computer when the client is controlled  Whether a remote screen is shown at its actual size in a window or if it shrinks to fit the window 36 Chapter 2 Getting to Know Remote Desktop In the Task Server pane, you can set:  Whether Remote desktop is using another computer as a Task Server, or whether this copy of Remote Desktop is being used as a Task Server  Whether other Apple Remote Desktop administrators can access your local Task Server  Whether clients collect user and application tracking data  A saved template for scheduling client reporting policies In the Labels pane, you can set:  Label colors and text for labeling computers In the Tasks pane, you can set:  Whether to automatically change focus to the active task  Whether to execute a notification script on task completion  Limits on History list contents and time until removed In the Security pane, you can set:  Whether to accept messages from client users  Whether to allow control of the computer while Remote Desktop is active  The default encryption preference for control and observe sessions  The default encryption preference for Copy Items and Install Packages tasks  Which features of Remote Desktop are available to nonadministrator users See "Apple Remote Desktop Nonadministrator Access" on page 67. Interface Tips and Shortcuts There are a number of features of the Remote Desktop interface which make it particularly flexible and powerful. The following lists a few built-in shortcuts to features which can make using Remote Desktop more productive. Computers can be selected from any window Any computer in any window--report windows, task windows, computer lists, observe windows--can be a target for some task. For example, if you are observing 10 computer screens and need to send a text message to one, select the screen with a single click and then choose Interact > Send Text Message. Likewise, if you get a software report on 50 computers and notice that one of the computers is missing some vital piece of software, you can drop that software onto the selected computer within the report window. Treating all windows as possible computer selection lists for tasks may save you lots of time switching between the Remote Desktop window and other windows as you accomplish your work. Chapter 2 Getting to Know Remote Desktop 37 Drag and drop works on configuration dialogs Configuration dialogs accept dragged items. Computer lists in the dialogs accept dragged computers. The Copy Items dialog accepts dragged files to copy, without having to browse the file system for them. Save yourself time and effort by dragging available items to dialogs rather than browsing for them. Making lists from reports or other lists You may need to make a list based on the outcome of some report, but you don't know which computers will need to be included. After getting a report and sorting on the desired column, you can select the computers and make a new list from the selection. If you double-click the list icon, you open another window containing the computers in the list. This is useful for comparing lists, or for using the new window as a source from which to drag computers to other lists. Saved Tasks and Task Templates save you time You may spend a lot of time coming up with the perfect software search to find exactly what you need. You shouldn't recreate that search every time you need it. Save your tasks, and duplicate them. With a little editing, you can have a number of similar saved tasks for specific uses. Alternatively, you can use task templates to save settings across task dialogs, applying the same settings through various tasks. 38 Chapter 2 Getting to Know Remote Desktop 3 Installing Apple Remote Desktop 3 To use Apple Remote Desktop, install the administration software on the administrator computer first, and then install and enable the client software on the computers you want to manage. You'll need your install disc, the serial number, and either the printed Welcome instructions, or these instructions. This chapter describes how to install Apple Remote Desktop for system administration and user interaction and gives complete setup instructions. You can learn about:  "System Requirements for Apple Remote Desktop" on page 39  "Installing the Remote Desktop Administrator Software" on page 40  "Setting Up an Apple Remote Desktop Client Computer for the First Time" on page 41  "Upgrading the Remote Desktop Administrator Software" on page 41  "Upgrading the Client Software" on page 42  "Creating a Custom Client Installer" on page 44  "Considerations for Managed Clients" on page 46  "Removing or Disabling Apple Remote Desktop" on page 46 System Requirements for Apple Remote Desktop Administrator and client computers:  Mac OS X or Mac OS X Server version 10.3.9 or later (Mac OS X version 10.4 or later is required for some features).  Mac OS Extended (HFS+) formatted hard disk.  For observing and controlling other platforms: a system running Virtual Network Computer (VNC)-compatible server software. NetBoot and Network Install (optional)  Mac OS X Server version 10.3 or 10.4 with NetBoot and Network Install services enabled 39 Network Requirements  Ethernet (recommended), AirPort, FireWire, or other network connection See "Setting Up the Network" on page 72 for more information. Installing the Remote Desktop Administrator Software To set up Apple Remote Desktop on administrator computers, you install the software on the computer you plan to use to administer remote computers. Then, you open the application setup assistant, and add to the main list of computers. To install Apple Remote Desktop on an administrator computer: 1 Insert the Apple Remote Desktop installation disc. 2 Double-click the Remote Desktop installer package and follow the onscreen instructions. The Remote Desktop application will be installed in the Applications folder. 3 Launch Remote Desktop (in the Applications folder). The Remote Desktop Setup Assistant appears. 4 Enter the serial number. The serial number can be found on the Apple Remote Desktop Welcome document that came with your software. Optionally, enter a registration name and organization. 5 Click Continue. 6 Enter a Remote Desktop application password and verify it. The Remote Desktop application password is used to encrypt names and passwords of client computers for Apple Remote Desktop. You can store this password in your keychain for convenience, or you can require that the password be entered each time you open Remote Desktop. 7 If you have another unlimited-licensed copy of Apple Remote Desktop acting as a Task Server (a dedicated computer running Remote Desktop for report data collection and delegated install tasks), enter the server address and click Continue. 8 Set the default data collection scope and time for newly administered computers. These settings will be stored as the default upload schedule, which can be applied to computers when you add them for administration. For more detailed information, see "Setting the Client's Data Reporting Policy" on page 160. 9 Click Done. The main application window appears. 40 Chapter 3 Installing Apple Remote Desktop 10 Configure some client computers for administration, find them in a scanner, and add them to a computer list. See:  "Setting Up an Apple Remote Desktop Client Computer for the First Time" on page 41  "Finding and Adding Clients to Apple Remote Desktop Computer Lists" on page 49 Setting Up an Apple Remote Desktop Client Computer for the First Time The following section contains information on setting up Apple Remote Desktop 3 on client computers. Since Apple Remote Desktop v1.2 was included with Mac OS X v10.3 computers and Apple Remote Desktop v2.2 was installed with Mac OS X v10.4 computers, all Apple Remote Desktop 3 client installations are upgrade installations, even if you are setting up clients for the first time. See "Upgrading the Client Software" on page 42 for more information. If the Apple Remote Desktop client software was removed from the computer, you can install a fresh copy of the most recent client software by installing Apple Remote Desktop manually. See "Method #2--Manual Installation" on page 43 for more information. If you're setting up Mac OS X Server for the first time using Server Setup Assistant, you can enable Apple Remote Desktop as one of the initial services. This allows you to administer a server immediately after server software installation by providing Remote Desktop with the user name and password of the default system administrator. Upgrading the Remote Desktop Administrator Software Upgrading Remote Desktop is just like installing it for the first time. The only difference is that the final button in the installer reads "Upgrade" rather than "Install." The installer upgrades existing software to its latest version, imports previously created lists, and restarts the underlying processes after completion. See "Installing the Remote Desktop Administrator Software" on page 40, for detailed instructions. If you are upgrading from version 1.2 and changing administrator computers, you'll need to transfer your existing computer lists. See "Transferring Old v1.2 Computer Lists to a New Administrator Computer" on page 58. Be sure to transfer your lists from Apple Remote Desktop v1.2 to the new computer before upgrading to Apple Remote Desktop 3. If you upgrade from version 1.2 to version 3.1 on the same administrator computer, this list migration is done for you. Chapter 3 Installing Apple Remote Desktop 41 Upgrading the Client Software This section contains information on installing Apple Remote Desktop 3 on client computers. Since Apple Remote Desktop client software was automatically included on the clients running Mac OS X v10.3 and v10.4, all Apple Remote Desktop 3 installations are upgrade installations, even if you are setting up clients for the first time. You can only upgrade Apple Remote Desktop v1.x and v2.x computers if they meet the minimum system requirements (see "System Requirements for Apple Remote Desktop" on page 39). Please note that there is no supported "downgrade" to any previous version, and if you upgrade the client computers to version 3.1, you will not be able to administer them with earlier versions of Remote Desktop. There are two methods to upgrade the client computer's software. Method #1--Remote Upgrade Installation This method works best with existing clients already configured using a previous version of Apple Remote Desktop. If used with existing administered clients, use Remote Desktop to identify those clients running a previous version. You may then upgrade them to the latest version. The main benefit of this upgrade method is the ease of installation and the retention of previous client settings, if any. This method only works for Apple Remote Desktop 1.2 clients and later. Earlier versions of Apple Remote Desktop like 1.0 must be upgraded to version 1.2 using Mac OS X's Software Update, or they must be updated manually. See "Method #2--Manual Installation" on page 43 for more information. To upgrade existing client software remotely using Apple Remote Desktop: 1 Enable the existing version of Apple Remote Desktop on the client computers. 2 Configure the clients for administration. See "Setting Apple Remote Desktop Administrator Access Authorization and Privileges Using Local Accounts" on page 62. 3 If the client computers are not in an existing Remote Desktop computer list, find the client computers using an Apple Remote Desktop scanner. See "Finding and Adding Clients to Apple Remote Desktop Computer Lists" on page 49 for more information. 4 Select the client computers to be upgraded. 5 Choose Manage > Upgrade Client Software. 6 Click Upgrade. 42 Chapter 3 Installing Apple Remote Desktop Method #2--Manual Installation This method works best if you have never enabled Apple Remote Desktop on your clients and have an existing software distribution infrastructure. This method also allows for the greatest power and configuration flexibility. Also, if you don't want Apple Remote Desktop to upgrade your clients using the Upgrade Client Software feature, you can perform a manual upgrade. The custom installer not only installs the needed software but also prepares and configures the client computer for administration and can be configured to add or edit user names and passwords for Apple Remote Desktop authentication. To manually upgrade the client software: 1 Use Remote Desktop to create a client software installer package. For detailed instructions, see "Creating a Custom Client Installer" on page 44. 2 Copy and install the package on the client computers. You need the name and password of a user with administrator privileges on the computer to install the package. There are several ways to do this. For example, you can:  Distribute the package by removable media, such as a CD.  Copy the installer to the clients over the network using file sharing.  Copy the installer to the clients using command-line tools like scp (if ssh is enabled), and use Apple's command-line installation tool, "installer," to install the package remotely. This process is described in detail in "Upgrading Apple Remote Desktop Clients Using SSH" on page 43.  Add the custom installer package to a Network Install image, using System Image Utility to automatically include the software and your custom settings when clients install the operating system using Mac OS X Server 10.4's NetBoot and Network Install features. WARNING: Custom install packages that create user names contain sensitive password data. Take care to store such custom installers securely. Upgrading Apple Remote Desktop Clients Using SSH You may not be able to or want to use Remote Desktop to upgrade existing clients to Apple Remote Desktop 3. If the clients have SSH enabled (called Remote Login in System Preferences), and are available on the network, you can still upgrade the client computers. You still need to use Remote Desktop to create a custom installer package. You also need the user name and password of a user with system administrator privileges on the client computer. Chapter 3 Installing Apple Remote Desktop 43 To upgrade existing client software using SSH: 1 Create the custom client installer package. For detailed instructions, see "Creating a Custom Client Installer" on page 44. 2 Open the Terminal application (located in /Applications/Utilities/). 3 Copy the installer package to the client computer by typing: $ scp -r @: For other options, see the scp man page. 4 Log in to the client computer by typing: $ ssh @ For other options, see the ssh man page. 5 On the client computer, install the package by typing: $ sudo installer -pkg -target / For other options, see installer man page. Creating a Custom Client Installer To install the Apple Remote Desktop client software on computers, you use the administrator application, Remote Desktop, to create a custom client installer. The custom client installer not only installs the Apple Remote Desktop system software, but can create user names and passwords on the client computer with their Apple Remote Desktop privileges already assigned. You'll use an assistant to create a custom client installer package. Any values set in the custom installer will apply to all the computers that receive the installation. While creating a custom installer, you will have a chance to create new Apple Remote Desktop administrator user names with passwords, and automatically set Apple Remote Desktop access privileges and preferences. WARNING: Custom installer packages that create user names contain sensitive password data. Take care to store and transmit such custom installers securely. To create the client installer: 1 Open Remote Desktop. 2 Choose File > Create Client Installer. The Custom Installer Setup Assistant appears. 3 Choose to create a custom installer and click Continue. If you choose not to create a custom installer, you can create a basic installer that sets no preferences on the client computer. 44 Chapter 3 Installing Apple Remote Desktop 4 Click Continue to begin creating a custom installer. 5 Choose whether to start Remote Desktop sharing at system startup. This changes the setting found in the Sharing pane of System Preferences. 6 Choose whether to hide or show the Apple Remote Desktop menu bar icon. 7 Click Continue. 8 Choose whether to create a new user for Apple Remote Desktop login. Click Continue. A new user account can be created to grant Apple Remote Desktop administrator privileges. Creating a new user account does not overwrite existing user accounts or change existing user passwords. If you choose not to create a new user account, skip to step 10 after clicking Continue. 9 Add a new user by clicking Add and filling in the appropriate information. Click OK after adding each user, and click Continue when you're ready to go on. 10 Choose whether to assign Apple Remote Desktop administrator access privileges to Directory Services groups. If you choose to do so, select "Enable directory-based administration." See "Apple Remote Desktop Administrator Access Using Directory Services" on page 63 for more information on using this method to grant Apple Remote Desktop administrator access. 11 Choose whether to assign Apple Remote Desktop administrator access privileges to specific users. Click Continue. If you choose not to assign administrator access privileges, skip to step 14. 12 Click Add to designate a user to receive Apple Remote Desktop access privileges. 13 Provide the user's short name and set the privileges as desired. See "Apple Remote Desktop Administrator Access" on page 60 for more information. Click OK after each user, and click Continue when you're ready to go on. 14 Choose whether to allow temporary guest control by requesting permission on the client computers. See "Considerations for Managed Clients" on page 46 for more information. 15 Choose whether to allow non­Apple VNC viewers to control the client computers, and click Continue. See "Virtual Network Computing Access" on page 68 for more information. 16 If desired, select and enter information in any or all of the four System Data fields. This information appears in Apple Remote Desktop System Overview reports. For example, you can enter an inventory number for the computer, a serial number, or a user's name and telephone number. Chapter 3 Installing Apple Remote Desktop 45 17 Click Continue. 18 Select a location for the installer. 19 Click Continue to create the installer. An installer metapackage (.mpkg file) is created in the designated location. 20 Click Done. Considerations for Managed Clients If you plan on restricting what applications can open on a managed client, you'll need to make sure that Apple Remote Desktop's processes are allowed to run. A managed client is a client computer whose environment is governed by Mac OS X Server's Workgroup Manager. The following options need to be enabled in Workgroup Manager's client and group application preference settings:  "Allow approved applications to launch non-approved applications"  "Allow UNIX tools to run" Removing or Disabling Apple Remote Desktop Apple Remote Desktop's client components are bundled as part of Mac OS X and Mac OS X Server. You may choose to remove or disable parts of it to fit your own personal computing needs. The following section describes how to uninstall or disable key Apple Remote Desktop components. Uninstalling the Administrator Software To remove the administrator software completely, you must remove the application, the encrypted list of computer user names and passwords, and the client information database. To remove the administrator software: 1 Drag the Remote Desktop application to the Trash. 2 Empty the Trash. 3 Delete the Apple Remote Desktop database from /var/db/RemoteManagement/ using the following commands in the Terminal application: $ sudo rm -rf /var/db/RemoteManagement 4 Delete the Remote Desktop preferences files using the following commands in the Terminal application. $ sudo rm /Library/Preferences/com.apple.RemoteDesktop.plist $ sudo rm /Library/Preferences/com.apple.RemoteManagement.plist $ rm ~/Library/Preferences/com.apple.RemoteDesktop.plist 46 Chapter 3 Installing Apple Remote Desktop 5 Delete the Remote Desktop documentation using the following commands in the Terminal application. sudo rm -r /Library/Documentation/Applications/RemoteDesktop 6 Delete the Apple Remote Desktop support files from /Library/Application Support/ using the following commands in the Terminal application: $ rm -rf ~/Library/Application\ Support/Remote\ Desktop/ $ sudo rm -rf /Library/Application\ Support/Apple\ Remote\ Desktop/ 7 Delete the Apple Remote Desktop installation receipts from /Library/Receipts/ using the following commands in the Terminal application: $ rm -r /Library/Receipts/RemoteDesktopAdmin* $ rm -r /Library/Receipts/RemoteDesktopRMDB* 8 Delete the Apple Remote Desktop Dashboard widget (after closing every instance of the widget) using the following commands in the Terminal application: $ sudo rm -r /Library/Widgets/Remote\ Desktop.wdgt/ Disabling the Client Software You may want to temporarily disable Apple Remote Desktop on a client without removing the software. WARNING: Because Apple Remote Desktop is part of the default Mac OS X 10.3 and 10.4 installation, do not remove the Apple Remote Desktop client components. To disable the client software on a client computer: 1 On the client computer, open System Preferences and click Sharing. If necessary, enter the user name and password of a user with administrator privileges on that computer. 2 Deselect Apple Remote Desktop in the Sharing pane. 3 Quit System Preferences. Apple Remote Desktop is now disabled and the underlying software is deactivated. Alternately, you can disable only the administrator privileges by doing the following: a Click Access Privileges. b Deselect each user account that you enabled for Apple Remote Desktop administration. c Click OK. d Quit System Preferences. Chapter 3 Installing Apple Remote Desktop 47 Uninstalling the Client Software from Client Computers To remove Apple Remote Desktop client software from Mac OS X clients, you need to remove a number of software components from each client system. WARNING: It is not recommended that you uninstall the client software. Disabling the client software is sufficient to stop Apple Remote Desktop system activity. See "Disabling the Client Software" on page 47 for instructions. To uninstall client software: 1 Open Terminal (located in /Applications/Utilities). 2 Delete the client pieces from /System/Library/ using the following commands in the Terminal application: $ sudo rm -rf /System/Library/CoreServices/Menu\ Extras/RemoteDesktop.menu $ sudo rm -rf /System/Library/CoreServices/RemoteManagement/ $ sudo rm -rf /System/Library/PreferencePanes/ARDPref.prefPane $ sudo rm -rf /System/Library/StartupItems/RemoteDesktopAgent/ 3 Delete the client preferences from /Library/Preferences/ using the following command in the Terminal application: $ sudo rm /Library/Preferences/com.apple.ARDAgent.plist $ sudo rm /Library/Preferences/com.apple.RemoteManagement.plist 4 Delete the client installation receipts from /Library/Receipts/ using the following command in the Terminal application: $ sudo rm -r /Library/Receipts/RemoteDesktopClient* $ sudo rm -rf /var/db/RemoteManagement/ 48 Chapter 3 Installing Apple Remote Desktop 4 Organizing Client Computers Into Computer Lists 4 Apple Remote Desktop uses lists of client computers to logically organize the client computers under your control. Connecting to client computers on the network and adding them to your list is necessary to administer them. This chapter describes finding clients and organizing them into lists for Apple Remote Desktop administration and user interaction. You can learn about:  "Finding and Adding Clients to Apple Remote Desktop Computer Lists" on page 49  "Making and Managing Lists" on page 54  "Importing and Exporting Computer Lists" on page 57 Finding and Adding Clients to Apple Remote Desktop Computer Lists Before you can audit, control, or maintain any client, you need to add it to an Apple Remote Desktop computer list. To use Bonjour to discover computers on your local subnet, your local network's routers and firewalls must allow multicast DNS (mDNS) packets on port 5353. To find computers that aren't on the local subnet, your local network's routers and firewalls must be properly configured to pass network pings, and TCP/UDP packets on ports 3283 and 5900. Remote Desktop has five methods for discovering potential clients:  Discovering clients on the local subnet (using Bonjour instead of network pings)  Searching the local networks (found through using all available network interfaces)  Searching a range of IP addresses  Using a specific IP address or domain name  Importing a list of IP addresses 49 Once you have found a potential client, you see the following default information: Search column (none) (none) Name IP Address DNS Name ARD Version Network Interface Description Displays a small icon indicating whether the computer is already in the All Computers List. Displays a small icon showing what kind of access the client is capable of. See "Client Status Icons" on page 167. The name given to the computer in the Sharing pane of System Preferences. The computer's IP address, if any. The computer's DNS name, found by reverse lookup, if any. Apple Remote Desktop client software version. Which interface the client responded through. If you want to change the default display list for the scanner, you can select Edit > View Options and choose any of the other available options (which include Computer Info Fields, Ethernet ID, Label, or others). To add a computer to a computer list, you first authenticate to the computer. Authenticated computers are found in the All Computers list in the Remote Desktop window. You can add a computer to the All Computers list without authenticating, but you will be unable to administer the client until you provide a valid user name and password. Finding Clients by Using Bonjour You can use Bonjour to display a list of only the computers on your local subnet with Remote Desktop enabled. All other client discovery methods display computers regardless of whether they have Remote Desktop enabled. To add clients found through Bonjour: 1 Select a scanner at the left of the Remote Desktop window. 2 Choose Bonjour. 3 Select the desired computers. 4 Drag the selected computers to the All Computers list. 5 Authenticate by providing a user name and password for an Apple Remote Desktop administrator. The computer is now in your All Computers list. 50 Chapter 4 Organizing Client Computers Into Computer Lists