Knowledge Base
How to Enable Apple Remote Desktop (ARD) from the Command Line
You can enable Apple Remote Desktop on a Mac from the command line using the kickstart tool at /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart. Running it with sudo lets you turn on Remote Management, set access permissions, and restart the agent without touching the graphical settings, which is exactly what you need when the only way in is SSH.
Key facts
- The kickstart tool lives at
/System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart. - It enables Remote Management (the service behind Apple Remote Desktop) from the command line.
- You need sudo (administrator) rights to run it.
- It is the standard way to turn on ARD remotely over SSH when you cannot reach the GUI.
- On modern macOS, full remote control may still require granting Screen Recording and Accessibility permissions.
How do you enable Apple Remote Desktop from the command line?
The kickstart command enables Remote Management and configures access in a single line. To turn it on for all users with full privileges, run:
sudo /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -activate -configure -access -on -restart -agent -privs -all
To grant access to a specific user rather than everyone, add the user and set their privileges explicitly:
sudo /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -configure -users adminuser -access -on -privs -all -restart -agent
Because the path is long, administrators often define a shell alias for kickstart so the command is quicker to type on machines they manage often.
When would you use kickstart instead of System Settings?
You use kickstart when there is no practical way to reach the graphical settings, which is the normal situation for a headless Mac or one in another office. If you can SSH into the machine but cannot stand in front of it, kickstart is how you switch Remote Management on so you can then connect with the Apple Remote Desktop client or another VNC viewer. It is also the basis for enabling ARD at scale through management tools and scripts, rather than clicking through Sharing settings on every Mac one at a time. (For a fleet, the command line is the only sane option.)
How do you turn Apple Remote Desktop off again?
To disable Remote Management from the command line, run kickstart with the deactivate and stop flags:
sudo /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -deactivate -stop
That switches the service off and stops the agent. It is good practice to disable ARD on any machine that no longer needs it, since an exposed remote management service is one more thing an attacker can probe.
Frequently asked questions
Does kickstart work on the latest macOS?
Yes, kickstart still enables Remote Management on current macOS versions. However, the operating system’s privacy controls mean that full screen control may also require granting the relevant Screen Recording and Accessibility permissions, which on a locked-down or managed Mac can need a configuration profile rather than a command alone.
Can I run kickstart over SSH?
Yes, and that is its main use. As long as SSH (Remote Login) is enabled on the target Mac and you have an administrator account, you can run the kickstart command remotely to switch Remote Management on without any physical or graphical access to the machine.
Is enabling Apple Remote Desktop a security risk?
It can be if left open. Remote Management is a powerful service, so it should be enabled only for the accounts that need it, restricted to trusted networks, and turned off on machines that no longer use it. Granting access to all users with full privileges is convenient but worth tightening on anything sensitive.
4iT supplies and manages Mac devices for Sydney businesses, including secure remote access setup across mixed Mac and Windows fleets. If your remote management needs tidying up, happy to take a look.
