ARD confusion (with FUS on)

[michaelsanford]

I have my iMac configured with 3 users (A B C), A is an admin, B and C are standard accounts with no restrictions. A is the only user who has access privileges (all access) on the iMac and the menu extra is enabled.

When I connect from my iBook as user A I have no problems, never have. Menu extra indicates that ARD is active.

Locally, when I stay logged in at the console and switch to user C, the ARD icon goes grey in that user's menubar. Checking the sharing pane (once authenticated) reveals that ARD is still active. Shutting it down and restarting has no effect.

If, logged in at the console as C I try to connect from my iBook I get an Access Denied icon in the list BUT I can still connect, I just get a black screen.

What's going on ?

The black screen leads me to think that it's trying to show me A's screen but since it's not active, it shows me nothing.

This may be a colossal misunderstanding on my part : I assume that ARD client side used credentials of a local user to permit access the computer regardless of who was active at the con (since I can log in when the computer is at the login screen). I don't think I'd have to log in as user C from my iBook to access C's screen, right ? That wouldn't make any sense...

So, in the client-side config, do I need to enable user C to do all the things I want, but still log in as user A (i.e., permit the user at the console to do what want ) ? I don't want anyone else with credentials for C's account to be able to log in though.

(This computer, my personal iMac, is going to be at a kiosk and I want remote access to it but User C uses credentials common to the entire company, and I don't want some wise-guy to have access to my personal stuff, even though my personal credentials are secret and strong). It's not such a big deal, since file permissions would prevent access and the likelyhood of someone connecting with ARD is slim, but still...