RemotePC Mass deployment via NinjaOne for Mac Devices

Mass Deployment via NinjaOne (Formerly Ninja RMM)

Use NinjaOne to remotely deploy the RemotePC application to multiple Mac devices or groups.

Prerequisites
Enable Accessibility, Screen Recording, and Allow in the Background Using NinjaOne Policy
Register Computers Using Custom Parameters
Deploy RemotePC via NinjaOne

Deploy the RemotePC package

Prerequisites for remote deployment:

Download the RemotePC mass deployment package.
Log in and copy the Configuration ID applicable to your account.

Enable Accessibility, Screen recording, and Allow in the Background Using NinjaOne Policy

Log in to the NinjaOne Admin Center.
Under MFA, click the dropdown and select 'SMS' or 'Authenticator'. Enter the 6-digit verification code from your authentication device, then click 'Submit'.
Click . Click 'Administration' > 'Policies'.
On the right side of the 'Agent policies' section, click 'Create New policy'.
In the 'Create a policy' popup,
1. Name: RemotePC-Config-Policy
2. Description: Mass deployment for RemotePC (Optional)
3. Click the 'Role' dropdown and select 'Mac Desktops and Laptops'.
4. Click the 'Parent policy' dropdown and select the corresponding parent policy. Choose this option only if you want to inherit the existing policy as a template and copy the configured settings into the new policy. If no policy is selected, the new policy will be added without inheriting the existing policy.
5. Click 'Create'.
In the newly created policy window, click 'MDM' > 'Custom payload'. Click '+ Add payload'.

In the 'Add payload' popup,

Enter the payload name: RemotePC-Payload

In the 'Content' field, add the following code.

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN"
 "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>PayloadContent</key>
    <array>
        <!-- Payloads go here  Accessibility -->
    <dict>
    <key>PayloadDisplayName</key>
    <string>RemotePC Privacy Permissions Accessibility</string>
    <key>PayloadIdentifier</key>
    <string>com.prosoftnet.remotepc.tcc.accessibility</string>
    <key>PayloadType</key>
    <string>com.apple.TCC.configuration-profile-policy</string>
    <key>PayloadUUID</key>
    <string>C54FE096-EFF9-4E34-A1E6-6638513034A4</string>
    <key>PayloadVersion</key>
    <integer>1</integer>
    <key>Services</key>
    <dict>
        <key>Accessibility</key>
        <array>
            <dict>
                <key>Allowed</key>
                <true/>
                <key>IdentifierType</key>
                <string>bundleID</string>
                <key>Identifier</key>
                <string>com.prosoftnet.remotepcDesktop</string>
                <key>CodeRequirement</key>
				<string>identifier "com.prosoftnet.remotepcDesktop" and anchor apple generic and certificate leaf[subject.OU] = JWDCNYZ922</string>
                <key>Comment</key>
                <string>Allow RemotePC Accessibility</string>
            </dict>
        </array>
    </dict>
	</dict>
	<!-- Payloads go here  ScreenCapture -->
	<dict>
    <key>PayloadDisplayName</key>
    <string>RemotePC Privacy Permissions ScreenCapture</string>
    <key>PayloadIdentifier</key>
    <string>com.prosoftnet.remotepc.tcc.screencapture</string>
    <key>PayloadType</key>
    <string>com.apple.TCC.configuration-profile-policy</string>
    <key>PayloadUUID</key>
    <string>74032F49-21BF-4561-99FE-C16A45222532</string>
    <key>PayloadVersion</key>
    <integer>1</integer>
    <key>Services</key>
    <dict>
        <key>ScreenCapture</key>
        <array>
            <dict>
                <key>Authorization</key>
                <string>AllowStandardUserToSetSystemService</string>
                <key>IdentifierType</key>
                <string>bundleID</string>
                <key>Identifier</key>
                <string>com.prosoftnet.remotepcDesktop</string>
                <key>CodeRequirement</key>
				<string>identifier "com.prosoftnet.remotepcDesktop" and anchor apple generic and certificate leaf[subject.OU] = JWDCNYZ922</string>
                <key>Comment</key>
                <string>Allow RemotePC Screen Recording</string>
            </dict>
        </array>
    </dict>
	</dict>
	<!-- Payloads go here  Login Items / Background Items -->
	<dict>
    <key>PayloadDisplayName</key>
    <string>RemotePC Login Item</string>
    <key>PayloadIdentifier</key>
    <string>com.prosoftnet.remotepc.servicemanagement.loginitem</string>
    <key>PayloadType</key>
    <string>com.apple.servicemanagement</string>
    <key>PayloadUUID</key>
    <string>3665339A-2CDB-46C1-976E-587E3B674595</string>
    <key>PayloadVersion</key>
    <integer>1</integer>
	<key>Rules</key>
            <array>
                <dict>
                    <key>RuleType</key>
                    <string>TeamIdentifier</string>
                    <key>RuleValue</key>
                    <string>JWDCNYZ922</string>
                </dict>
            </array>
	</dict>
    </array>
    <key>PayloadDisplayName</key>
    <string>RemotePC MDM Profile</string>
    <key>PayloadIdentifier</key>
    <string>com.prosoftnet.remotepc.profile</string>
    <key>PayloadOrganization</key>
    <string>IDrive Incorporated</string>
    <key>PayloadScope</key>
    <string>System</string>
    <key>PayloadType</key>
    <string>Configuration</string>
    <key>PayloadUUID</key>
    <string>DA39F4F7-A36B-44A4-BAEC-3E02D04078E3</string>
    <key>PayloadVersion</key>
    <integer>1</integer>
    <key>PayloadRemovalDisallowed</key>
    <true/>
    <key>TargetDeviceType</key>
    <integer>5</integer>
</dict>
</plist>

Click '+ Add'. The custom payload has been successfully added.
Click 'Save'.
Enter the 6-digit verification code when prompted and click 'Verify'. The new policy has been created.

To apply the newly created policy to your organization, follow the steps below.
1. Navigate to 'Administration' > 'Organizations'.
2. In the 'Organizations' section, click the organization name from the grid below.
3. Click the 'Policies' tab. In the 'Agent Policies' section, click the 'Mac Desktop' or 'Mac Laptop' dropdown and select the newly created policy. Click 'Save'. Click 'Close'.
To apply the newly created policy to the individual devices, follow the steps below.
1. Navigate to the 'NinjaOne' admin center. Click 'Devices'.
2. Select the corresponding checkboxes of your preferred devices. Click the 'Edit' dropdown and select 'Policy'.
3. In the 'Edit assigned policy' pop-up, click the 'Policy' dropdown, select the required policy, and click 'Update'. The selected policy is applied to the selected devices.
  
  Note: Editing this policy will apply a device-only policy override. Once the new policy is applied, changing the policy at the organization level will no longer affect this device. The device will automatically allow most permissions added in the custom payload. While the ScreenCapture permission cannot be explicitly granted, the device will be configured to allow any user account to enable it. For information on screen recording permissions, refer to the Remote Access via Desktop FAQ.

Register Computers Using Custom Parameters

Open the 'RemotePC Preinstall.sh' file you previously downloaded.
Edit the script, add values for the required parameters as listed in the table below, and save the file. Refer to the image for reference.
Use the parameters below to register computers to a specific group, along with other parameters during deployment.

Parameters	Description
DEPLOY_CODE	This is a mandatory parameter, and you can find it under Deploy Package > Group deployment > Configuration ID in your RemotePC account
PERSONAL_KEY	Set a 'Personal Key' for the remote computer
GROUP_NAME	Name of the group in which the computer will be assigned *
HIDETRAY
1	Enabling this option will prevent users from accessing the tray options on their remote computers
0	Unhide the tray and allow users to access the tray options
HOSTALLOWDENY_REQUEST
0	Connection request permission is disabled
1	Automatically decline the connection in the login screen after the request expires
2	Automatically allow connection in the login screen after the request expires
3	Allow connection after the request expires

Deploy RemotePC via NinjaOne

To create a preinstallation script, click 'Administration' > 'Library' > 'Automation'. Click '+ Add automation' > 'New Script'.
A New Script window opens up. Drag and drop the RemotePC Preinstall script saved in the previous step, or copy and paste the script. In the 'Create Script' section,
1. Enter the automation name: RemotePC MAC Preinstall Script
2. Enter the automation description.
3. Select 'ShellScript' from the 'Language' dropdown.
4. Select 'Mac' from the 'Operating System' dropdown.
5. Click 'Save'. Click 'Close'.
On the right side of the 'Automation library' section, click the '+Add Automation' dropdown and select 'Installation'.
In the 'Install application' popup,
1. Go to the 'General' tab,
  1. Name: RemotePC MAC
  2. Description: Mass deployment for RemotePC (Optional)
  3. Select 'Mac' as the Operating System.
  4. Select the corresponding OS Architecture (64-bit).
  5. Click 'Choose installer file', locate the downloaded RemotePCHost.pkg file on your computer, and click 'Open'.
  6. Select 'System' from the 'Run as' dropdown.
2. Go to the 'Additional settings' tab,
  1. Click 'Select automation' in the Pre-script section.
  2. In the popup, select the ‘RemotePC MAC Preinstall Script’ as the pre-script automation from the list below.
  3. The preinstallation script popup appears. From the 'Run As' dropdown, select 'System' and click 'Apply'.
  4. Click 'Submit'.
Enter the 6-digit verification code when prompted and click 'Verify' to complete the MFA.

The installer file upload begins, and the progress bar shows its status.
An 'Automation processing' popup appears, indicating that your installer file has been submitted for processing. Click 'Close' to close the popup or click 'View status' to view the status of your package installation.
Wait for the RemotePCHost package to finish uploading and for the application to be saved.
Once the RemotePC package is successfully added, navigate to 'Devices' in the NinjaOne admin center, select the corresponding device or groups, and click
Click 'Automation' > 'Install Application'.
In the 'Automation Library' popup, click the build you just added.
The build popup appears. Click the 'Run as' dropdown, and select 'System'. Click 'Run'.
A confirmation window appears. Click 'Run' to run automation for the selected device. Based on the selection made, the application will be installed accordingly. The automation is now under processing.

Note: It may take some time for the machines to receive the deployment package.
Once the RemotePC application is successfully installed, check for the device in the RemotePC dashboard. The machine will be listed in the dashboard under 'Computers'.