Admin Security

[darthasp]

UltraVnc is the best! it really is - Just one thing would make it better..

I know there has been alot of discussion about security here so I will add my comments - I am an admin in a school I use UltraVnc for user support but some of the teachers use it for teaching.
Some of the teachers are local Adms.

I would like UltraVNC to allow you access to the properties function only if you are in the correct VNC domain group.
i.e. even if you are a local adm you still cannot change UVNC properties.

It's really frustrating that I set it up but and other people change the settings so that I have to walk over to the pc anyway.

bacically it would be cool if you could restrict access to a group. Then only me and my technicians would be able to change settings.

Some teachers have to be local adms for installing there own software for testing etc.

Please consider this request...

All other parts of UVNC rock!!

Phil

[lenisham]

UltraVnc is the best! it really is - Just one thing would make it better..

I know there has been alot of discussion about security here so I will add my comments - I am an admin in a school I use UltraVnc for user support but some of the teachers use it for teaching.
Some of the teachers are local Adms.

I would like UltraVNC to allow you access to the properties function only if you are in the correct VNC domain group.
i.e. even if you are a local adm you still cannot change UVNC properties.

It's really frustrating that I set it up but and other people change the settings so that I have to walk over to the pc anyway.

bacically it would be cool if you could restrict access to a group. Then only me and my technicians would be able to change settings.

Some teachers have to be local adms for installing there own software for testing etc.

Please consider this request...

All other parts of UVNC rock!!

Phil

Have you considered using psexec to run regini on the remote machine and reset the registry settings?

The use psservice to restart the service.

If the service is hung than use pskill to kill winvnc.

All pstools are available at www.sysinternals.com.

[darthasp]

not sure how this is relavent with the above...???

[NightRyder]

yeah, me neither... but i dont think what you want is an option right now, but in the features request section you might want to bring it up. the devs are looking into security right now, so this has a good chance of getting implemented.

[ipsec]

Have you considered using psexec to run regini on the remote machine and reset the registry settings?

The use psservice to restart the service.

If the service is hung than use pskill to kill winvnc.

All pstools are available at www.sysinternals.com.

I guess with the psexec part of this you could have them execute a registry install to change the settings back to what you want... so you dont have to go across campus..

But I dont think it fixes your problem of keeping people out if they are local admins on the box.

[Anon]

Just a thought - you can apply permissions to entries in the registry (regedt32 on W2K or below, regedit in XP if I remember) so try restricting the write permissions on the VNC entries in HKEY_Local_Machine. This way you can grant specific groups the rights to change the default settings. Also, if you apply teh same process to the HKEY_Default_Users entry for VNC (You'll have to make it first) then the same level of control can be applied to the per-user settings.

I think....never had to test it...um...