Mac Remote Access

Set up or troubleshoot remote access to a Mac over Tailscale.

Workflow

1. 1. Check the Mac side first.
2. Verify TCP reachability from the remote client.
3. Check Tailscale ACLs before tuning VNC clients.
4. Preserve at least one command-line recovery path (SSH).
5. Recommend a layered setup: SSH fallback, AnyDesk primary GUI fallback, VNC secondary.

Mac-side checks

Run these first when local access to the Mac exists:

CODEBLOCK0

If Screen Sharing looks stuck, restart it:

CODEBLOCK1

Windows-side checks

Use PowerShell and prefer TCP tests over ping:

CODEBLOCK2

Interpretation:

• - 22=False and 5900=False → check Tailscale ACL / policy first
• 22=True and 5900=False → check Mac Screen Sharing / VNC service
• 22=True and 5900=True → move to client auth/compatibility

ACL guidance

Prefer explicit ACLs during troubleshooting.

Read references/acl-template.md for a minimal working example.

References

• - references/acl-template.md — minimal ACL template
• INLINECODE2 — baseline checklist
• INLINECODE3 — end-to-end operating procedure
• INLINECODE4 — GUI fallback setup and troubleshooting notes