Securing VNC

Mike · Post by **Mike** » 2004-07-16 01:01

Once you have installed VNC on a server, how do you ensure that the configuration cannot be changed by anyone using VNC.

My problem is that as an administrator if I set a password and use encryption for communications I do not want anyone to be able to disable or change this configuration

Mike · Post by **Mike** » 2004-07-16 01:39

One thing I forgot to mention - we are talking Windows 2000 for the systems involved

Sir Nigel · Post by **Sir Nigel** » 2004-07-16 03:08

In the registry there are setting for disallowing the opening of the properties dialog. You can set it by default to be off. Like this:

[HKEY_LOCAL_MACHINE\SOFTWARE\ORL\WinVNC3\Default]
"AllowProperties"=dword:00000000

RobH · Post by **RobH** » 2004-07-19 12:27

[HKEY_LOCAL_MACHINE\SOFTWARE\ORL\WinVNC3\Default]
"AllowProperties"=dword:00000000

pimprich · Post by **pimprich** » 2004-09-07 15:02

is there a way to enable only users with admin privleges to modify the settings?

Post by **Rudi De Vos** » 2004-09-07 15:10

TEST19 block settings for non admin users

pimprich · Post by **pimprich** » 2004-09-07 17:21

I tried that but it only blocks users from changing default settings. they can still change their own user settings.

Post by **Rudi De Vos** » 2004-09-07 18:03

I tried that but it only blocks users from changing default settings. they can still change their own user settings

What settings can they still change ?
How ?
Can they change any other settings then the polling settings.

Running as service/application.

pimprich · Post by **pimprich** » 2004-09-07 19:21

the user is able to change their own "user" settings but not the "default" settings. I figured after I reboot the system, the settings would go back to default but it didn't. the user was able to change incoming connection settings such as ms login, ports, and they were also able to force view mode and disable file transfers. I have to find a way to disable the users from changing these settings. I know how to do it in the registry but I wuold prefer a way to do it without disabling the admin permissions to configure it. HELLPPPP!

Post by **Rudi De Vos** » 2004-09-07 19:35

How is the user able to change the settings.....

Test19_8 does not have user settings when you run as service.
Service settings are used for all user connections.

The properties admin should be blocked for a normal user user.
Are the admin properties open ?
Please explain how the user is able to change the settings.

pimprich · Post by **pimprich** » 2004-09-07 19:59

if the user logs in and either double clicks the icon in the system tray or accesses the properties through the start menu, they are able to change all settings in the "current user properties" dialog.

pimprich · Post by **pimprich** » 2004-09-07 20:00

by the way, I am running in service mode

Post by **Rudi De Vos** » 2004-09-07 20:50

Retested on XP (TEST19_8)

admin -> properties
restricted user->no properties, double click nothing
via start menu nothing....

OS ?
What are the local settings of the user....

The only way a user get access
1) 9.X, There exist no local admin, every user is local admin
2) NT> User has local admin rights.

Anybody else already tested the properties in TEST19_8
Can anybody confirm the problem, not able to repeat on my system.

pimprich · Post by **pimprich** » 2004-09-07 21:05

I just noticed when I restart the machine with server running, the test_19.exe does not run automatically. I have to login as admin and run the .exe. after that, the non-admin user has no access to properties. is there a way to have the test_19.exe automatically run by default?

pimprich · Post by **pimprich** » 2004-09-07 21:49

I also noticed that when I run the test_19 exe, it locks me out of the properties while I am logged in as admin. it seems like I am the only one with problems with this. maybe I downloaded a bad file.

nolanv · Post by **nolanv** » 2004-09-22 02:45

Pardon my ignorance but where do I get the test 19 files and is this a end user component.

ipsec · Post by **ipsec** » 2004-09-22 17:03

nolanv wrote:Pardon my ignorance but where do I get the test 19 files and is this a end user component.

Its under the category "News Announcements and Releases"

Depends on which version you want, and follow the links to that specific version.

Post by **Rudi De Vos** » 2004-09-22 17:19

Test 19 is just winvnc....
You need to install RC18 and replace winvnc.exe with the test version.

Just running test exe does not install winvnc, but start winvnc as application

UltraVNC

Securing VNC

Securing VNC

Continued security - help needed

test 19

Re: test 19