macOS 26 - Tahoe
The macOS system must disable Remote Management
STIG ID: APPL-26-002250 | SRG: SRG-OS-000095-GPOS-00049 | Severity: Medium | CCI: CCI-000381 | Vulnerability ID: V-277139
Description
Remote Management must be disabled.
Check
C-81294r1149352_chk
Verify the macOS system is configured to disable Remote Management with the following command:
/usr/libexec/mdmclient QuerySecurityInfo 2>/dev/null | /usr/bin/grep -c "RemoteDesktopEnabled = 0"
If the result is not "1", this is a finding.
Fix
F-81199r1148868_fix
Configure the macOS system to disable Remote Management with the following commands:
/System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -deactivate -stop