


$kickstart -configure -access -on -users admin -privs -allĬonfusingly, Apple did document that this would allow view-only as of macOS 10.14 Mojave, but this wasn’t what I observed. $kickstart -configure -allowAccessFor -specifiedUsers Prior to 12.1, it was possible to enable Screen Sharing by simply running this: So, this post is both a recap of what I’ve been able to make sense of and some ideas/research that I hope clarifies things going forward. But, as I’m learning how to make use of MDM on headless build machines, what I dug up seems generally relevant for others leveraging Screen Sharing / Remote Desktop in their environments. The only macOS machines I manage are build servers used for continuous integration (CI), not for regular use, and so I am looking at this for this somewhat niche use-case. I came across multiple Slack threads where people were confused by Apple’s documentation not matching their observations about existing solutions involving kickstart and PPPC configuration profiles. I spent the last several days being confused by (1) how the change would impact my environment, (2) Apple’s documentation, (3) mixed reports from others about whether their prior methods for enabling Screen Sharing / Remote Management were still working as usual for them on Monterey 12.1, and (4) disagreement over what components of their existing solutions were even required to have functional Screen Sharing.
