Query windows timemout and UAC / trying to reconnect

[Sander02]

Hi,

We run VNC server in service mode and set the display query windows to 10 secs, so that users can click accept and otherwise we can still do a remote session.

This works fine in windows 7, but it became unworkable with windows 10. This 10 sec delay is also active when running something as an admin, the users have to accept again and
what then happens is that the connection dropped, trying to reconnect and this takes the same 10 sec wait. Users often have to accept like 3 times when I need something to do as an admin. And if they user is gone,
I have to wait 3 times 10 sec. I allready changed it for some users to 5 sec, but we don't want to disable it completle. We like the user to accept it.

When I disable the query windows, it all works fine.

Is it possible to set a different timeout setting for the query window and uac pompt or reconnect?

[Sander02]

No one else is using the display query window?

This is really a frustrating issue!

[Rudi De Vos]

The problem is that the UAC popup request run in a secure desktop.
Vnc service need to stop vnc in the default user desktop and start an instance in the secure desktop.
Normal, the autoreconnect does the reconnect and it all happen in background.

The problem is when you have setup that the remote user need to give permission to logon ( query window) the server act like this on
the new connections and ask again permission.

We could detect the AUC popup and disable the query in that case, but then if your first logon would happen while the remote user
has his UAC open... no query.
There is a littel security issue... suppose you connect the first time and just at that moment the user has a UAC secure desktop open.
If that's acceptable some minor code change could possible solve it.

[Sander02]

Hi Rudi, thanks for your exlplanation. I think that security risk is ok. If a user has an UAC screen, they mostly tell me by phone if I can logon, so then I can tell, they don't see the accept window. For the rest it stays the same.
Would be nice if you could add the option. Thanks in advance!

[Sander02]

Would be graat if this option will be added in a new release. Have to reinstall a lot of machines in the coming months so could install the new version.

[Rudi De Vos]

First idea will not work, i can detect the UAC desktop, but you also need to return to the default.
I was thinking about the following… add the option
Query window activate after x seconds.

[Sander02]

Thanks Rudi, not sure what you mean with activate it after xx seconds. Can you explain? Thanks.

[Rudi De Vos]

winvnc.exe is restarted by the service to switch desktops.
Login, default, secure

If querybox is activated x seconds after the restart winvnc ( let say 10 seconds) then the viewer can reconnect
during the 10 seconds without showing the querybox.

[Rudi De Vos]

Added new option
disable after session switch


Normal when you force the user to accept the connection and you need to switch to another desktop
like UAC secure desktop, the viewer reconnect and the user need to accept again.

This parameter allow to set a delay for the query window to become active so you can reconnect without the user need to accept again.

edit
PS: text gonna change in Delay [] seconds

added in latest 1.2.2.2 pre-release

[leozoccoli]

Hello, did this delay () option work?
Here I had problems getting it to work.
In the first test it worked, but after a short time stopped working, again asking the user accept after switching to UAC screen

[Rudi De Vos]

The service restart winvnc when the session switch.
This parameter disable the query the first X seconds after restart.

[Sander02]

Great! Thanks a lot Rudi. I will test it and let you know. I'm about to create a new corporate image, so it came just in time.

[Sander02]

I was looking for the prerelease download and see final 1.2.2.2 is already available. Installed it, but the the new query option did not appear?

[Rudi De Vos]

???
-The delay timeout option is in it ...

[Sander02]

I see it now. Strange, I even rebooted yesterday. Nice, will let you know!

[Sander02]

Just tested it with on both clients the new version. Display query 8 sec. Delay 0 sec. Default action allow.

I do a run as on notepad, I get connection dropped, trying to reconnect. After 8 sec it reconnects.

So the new delay setting seem to be ignored?

[leozoccoli]

Hello, I still can not use this option in windows 10. In windows 10 the remote client still has to click accept when it goes to some UAC screen.

In Windows 7 it works perfectly.

[Rudi De Vos]

Test windows 10 prof

test 1
*Start winvnc and set query with reject ON
*connect viewer
-> Query box
*Set timeout to 100
*Restart winvnc.exe and connect within 100 sec -> no Query box, start is within 100s

test 2
*Start winvnc.exe as service
connect from other pc
close connection and let service restart the winvnc instance -> no Query box, start is within 100s

test3
*Start winvnc.exe as service
start a uac ( like uac s in start)
Seems the uac run in the same session an the viewer doesn't need to reconnect.
Unstable.. sometimes i get grey screens

[Sander02]

We have it running as a service on all our computers: "C:\Program Files\UltraVNC\WinVNC.exe" -service
W10 Enterprise

[Rudi De Vos]

Test server this should not disconnect on UAC and without he also don't ask the accept again.

https://www.uvnc.eu/download/1222/winvn ... 092018.zip

[leozoccoli]

Hello, Rudi. I thank you for the quick support you are giving to this topic.

With this new executable that sent the connection is not lost, however the moment the screen is in UAC only I can see the screen, the options of interacting with mouse and keyboard do not work.

[Sander02]

Hi, I have the same issue as leozoccoli reported.

I see an winvnc64.exe in your zipfile. I have the 64bit version installed but this file is missing?

[Rudi De Vos]

You are correct... no switching but also no input.
Looks like the accept box is causing it, just implemented it different...looks to work ( fast tested)

https://www.uvnc.eu/download/1222/winvn ... 092018.zip

[Sander02]

Yes, it works! Thanks a lot. Let me know if you have released it, for now I replace the exe file.

Could tou tell me what the winvnc64.exe file is doing? This is not included in the x64 version which I use.

[Rudi De Vos]

single zip, so winvnc.exe for 64 is called winvnc64.exe... lazy else i neede to add a folder for 32 and 64

[Sander02]

I understand but I have installed the 64 bit version of UltraVNC and I don't have that file. So which version do I have to download which include it?

[leozoccoli]

You are correct... no switching but also no input.
Looks like the accept box is causing it, just implemented it different...looks to work ( fast tested)

https://www.uvnc.eu/download/1222/winvn ... 092018.zip

Hello Rudi, now it's 100% working. Thank you very much for the support and corrections.
Are you releasing a new version?

[Rudi De Vos]

Sander02 ,
Just rename winvnc64.exe to winvnc.exe and overwrite. ( make a copy of the old exe, so you always can return)
Make sure the service isn't running else file is locked and you can't overwrite

[Sander02]

Thanks, is the new release with this fix coming soon? Otherwise I will install 1.2.2.2 in our corporate image and replace the exe file.

[Rudi De Vos]

The fix is in 1223.

Current winvnc and vncviewer exe are online
msi is also online but forgot hte links
setup will be placed online this weekend
ONLY via FORUM

After a week or 2 it's moved to the webpages.