Is it possible to do the following and how ?

[wyvernshill]

Hello everyone,

I am a longtime user of RADMIN but recently with the move to windows 7 it has presented us with a few problems.

I was wondering if you can configure UltraVNC similarly as Radmin.

What did i do in Radmin :

* only install the server-side that accepts connections over the LAN from a specific set of users with their password (Active Directory).

* Install the serverside application silently and hide ALL notifications. From time to time it pays off to see who is doing what to mess up the network you have set up. Because everyone knows that once you ask what they were doing they never did anything ...

* Block the use of the "server configuration tool" on the server side to stop people from messing with it (including the icon in the taskbar)

In other words i want to install the server without allowing the possibility that users change stuff on their computer that would block me from connecting.

It would be even more interesting if that could be configured in the registry instead of an INI file that they could alter....

If this is all possible can someone point me out how ?

Thanks !

[lilleyen]

Hello everyone,
In other words i want to install the server without allowing the possibility that users change stuff on their computer that would block me from connecting.

snipped

If this is all possible can someone point me out how ?

Thanks !

Exactly my problem.
I would like to do this too.

[B]

How about this low-tech approach?

After installing as a service, remove all references from the Start Menu. Once installed as a service, I think UltraVNC and its ini files will live in Program Files or Program Files (x86). Those directories should already be protected from most users, and you can use normal Windows techniques (ACLs, hidden attributes, etc.) to further lock them down as needed.

[wyvernshill]

@B

I understand what you mean but its a bit hard to do when you have to do that manually for all computers or have to force it using a policy.

I keep referring to radmin but there you had three files sitting in the "system32" folder.

2 of them were dll files one was the "server". Even if you started the server manually (the exe file) it wouldnt start anything. The service was already running and everything was "configured" in the registry including users and passwords. You didn't get any interface or anything.

The user in other words couldnt find anything, the only thing they could do was remove the files manually. (but it's easy to place them again through the network since the config is saved in the registry)

The reason "restricting rights" won't work for me is that certain users have gotten "permission" from higher up to get the full administrator rights ... let us say that those are also the people messing up their computer all the time. So they WILL start poking around and block ultravnc with or without them realising it.


*EDIT* I see in the UltraVNC settings an option that sais : "Disable ini file settings and use registry" so it seems possible to do partially what i want but where can i find the info on where it is in the registry and what key controls what

[B]

They have local admin rights?? Then of course, as you know, all bets are off, and they can do anything they want on the machine. So you're going for obscurity more than anything else.

Yeah, the traditional VNC registry keys are all start with ORL (Olivetti Research Labs). I'm pretty sure this is in the UltraVNC docs somewhere, but a good summary is in the original VNC / RealVNC documentation. It's a bit messy as there are both machine and user-specific hives.

If you want a quick and dirty fix, you could hide the directory or files, rights-limit the registry keys, and set UltraVNC to run without an icon.

I've no idea how you'd distribute this though.