Can I add groups manually to MS Login II?

[bhusk]

Like a registry hack or a file?

I'm just hoping I can add groups to my install without using the admin properties dialog so I don't have to recapture the installation again.

Also, when using MS Login, is it possible to use classic authentication as well?

We have a few different trusted domains and also a few locations who are not even on a domain, so it would be useful to allow those not on a domain to be able to use the classic authentication without having to create an account for them in AD.

Thanks in advance

[mod=494,1144954970]moved from off topic to MS-Logon[/mod]

[Marscha]

There's a cmdline tool called MSLogonACL which could be used.
See the last section of http://doc.uvnc.com/features/authentication.html

you cannot have both MS-Logon and classic auth activated on the same computer.
But you can certainly use different auth methods for different computers.
The viewer detects the auth method and acts respectively (asking for username/passwd or passwd only).

[bhusk]

Thanks, but that won't really help our situation I guess.

However, using MSLogonII seems to allow us to connect to computers not joined to a domain by using the local admin account so we'll just use that for now.

I found the ACL thing, thanks!

[Marscha]

It may also be helpful to not use the local admin account.
Create some other local accounts and use these accounts for access control.

[bhusk]

Thanks, we may look into that but the logistics could be difficult.

In order to push that ACL with a local account for each computer, we'd need to do it for each individual computer name, right?

[Marscha]

There's an abbreviation that helps in such cases:
Instead of MyComputer\LocalUser you can write .\LocalUser
A dot is replaced with the local machine name, two dots are replaced with the machine's domain.
..\LocalUser -> MyDomain\LocalUser

[bhusk]

Excellent, thanks for your help!