Control ARD scripts

ard_installcheck.sh

#!/bin/sh

PATH=/usr/local/bin:/usr/bin:/bin:/usr/sbin:/sbin:/usr/local/munki export PATH

# this will run as a munki install_check script
# exit status of 0 means install needs to run
# exit status not 0 means no installation necessary

# adapted scripts from  here: https://jamfnation.jamfsoftware.com/discussion.html?id=1989

# we need to check wether ARD is running

ardrunning=$(ps ax | grep -c -i "[Aa]rdagent")

if [[ $ardrunning -eq 0 ]]; then
	echo "ARD not running"
	exit 0
fi

# All Users access should be off

all_users=$(defaults read /Library/Preferences/com.apple.RemoteManagement ARD_AllLocalUsers 2>/dev/null)

if [[ $all_users -eq 1 ]]; then
	echo "All Users Access Enabled"
	exit 0
fi

# and wether the labadmin account is privileged

ard_admins=$(dscl . list /Users naprivs | cut -d ' ' -f 1)

if [[ $ard_admins != *clientadmin* ]]; then
	echo "labadmin no ARD admin"
	exit 0
fi

echo "everything looks great"

exit 1
	

ard_postinstall.sh

#!/bin/sh

PATH=/usr/local/bin:/usr/bin:/bin:/usr/sbin:/sbin:/usr/local/munki export PATH

# use kickstart to enable full Remote Desktop access
# for more info, see: http://support.apple.com/kb/HT2370

kickstart="/System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart"

#enable ARD access
$kickstart -configure -access -on -users clientadmin,localadmin -privs -all

$kickstart -configure -allowAccessFor -specifiedUsers

$kickstart -activate

exit 0