These groups are automatically granted specific Remote Desktop access privileges

You can also create specific groups in the domain. Open Directory under Mac OS X Server or Active Directory under Windows Server), Additional Information: /System/Library/CoreServices/RemoteManagement/ARDAgent.If your network uses a directory domain and network user accounts (either Removed preference to start ARD after reboot. Solution Perform the following to disable Remote Management: Graphical Method: Open System Preferences Select Sharing Uncheck Remote Management Terminal Method: Run the following command to disable Remote Management: $ sudo /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -deactivate -stop Starting. Impact: Many organizations utilize ARD for client management. Mobile devices without strict controls are vulnerable to exploit and monitoring. Rationale: Remote Management should only be enabled on trusted networks with strong user controls present in a Directory system. Computers will be available on port 5900 on a macOS System and could accept connections from untrusted hosts depending on the configuration, definitely a concern for mobile systems. Remote Management should only be enabled when a Directory is in place to manage the accounts with access. If Remote Management is used, refer to the Screen Sharing section above on issues regard screen sharing. In fact, only one of the two can be configured.

The screen sharing options in Remote Management are identical to those in the Screen Sharing section. Remote Management can be used by remote administrators to view the current screen, install software, report on, and generally manage client Macs. Information Remote Management is the client portion of Apple Remote Desktop (ARD).

Apple mac remote management