Local Permissions Questions

[yepyep]

Alrighty... I have UltraVNC 1.0.2 install on a Windows XP machine running as a service. I am using MSLogin1 to authenticate users.

When a user that is setup properly in the "Configure MS Login Groups" tries to connect to the VNC Server with thier domain credientals, they are unable to login and get a "VNC Authentication Failed" error unless they are an administrator on the machine that is running the VNC Server.

I guess I am asking if a user has to be an administrator on the local machine of the vncserver to be able to connect to it via vnc viewer. I scowered these forums looking for someone with similar issues, and came across a few posts that were somewhat related, but didnt really help.

I have tried connecting to the vncserver with all the variations of usernames, ie user@domain.local, domain\user, etc

the WinVNC-authSSP.log did not help either

I assume that you dont have to be an admin on the vnc server pc, but I am looking for some advice on debugging this issue. Does the user have to be a "power user" or a local user at all, etc?

This issue is also occuring on every XP machine and NT machine in the office.

Please advise!

Thanks

-Yep

[mod=3406,1172021799] Moved to post to the MSlogon Topic [/mod]

[Marscha]

You don't need admin rights for connecting with MSLogon I.
With MSLogon I, you just have to enter the username without any domain prepended/appended.
MSLogon I then searches if there is a local user with that name or a domain user with that name.
The domain that is searched is the one where the computer is joined to.

With MSLogon I you cannot specify user accounts in the "Configure MS Login Groups" dialog, only groups.

You can also try to use MSLogon II.

[yepyep]

Thanks for the quick reply.

I placed the user into a VNCUsers group in the domain and added that group to UltraVNC server on the NT4 workstation. The user still gets an "authentication failed" error when they attempt to connect to the NT4 pc and enter their domain username and password.

I then added this user as a local user to the NT4 pc and they were still unable to connect.

I then made this user a power user and they were still unable to connect.

I then made this user an admin user and they were able to connect ok.

As for me, my login is the VNCAdmins group on the domain and that group was also added to the VNC server. I am able to use my credientals without a problem and am not explicetly defined as a local user on the NT4 pc, but I am also a domain admin and by default have admin rights on local machines.

I will test this on an XP machine later today.

-Yep

[yepyep]

I am able to reproduce this issue on every Windows XP Pro machine that we have. The user can only login to VNC if they are an administrator on the machine they are trying to log into (in addition to being in an MS logon1 group). What am I doing wrong? Anyone?

[Marscha]

already tried MS-Logon II?
Do you have the same behavior there?

[yepyep]

MS-Logon II works ... wonder what the problem was.