Force the server to timeout

[jaustill]

I have ChunkVNC and the repeater up and running with no problems.

I want to make sure my version of ChunkVNC is only used for internal tech support with the users knowledge and also is not set up as a "backdoor" to let users back into their PC's from outside the office.

I Do Want a user to be able to start a remote help session and walk away while a tech is fixing their problem, but when the tech is through I do not want the tech to be able to "pop back in" a couple of hours after being invited in the first time without the user "server" making another request.

I have set our router to only allow access to the windows PC running the repeater on 5901 and 5500.

In the ultravnc.ini I have set the IdleTimeout=900 [the idea is that after 15min of inactivity the server closes]

Is there anything else I can do to make sure the program is used as we intend it to be used.

[B]

As long as you don't have the user install ChunkVNC as a service, the session will/should end as soon as the remote viewer finishes.

(I think that's right; I've been using service mode for a long while now.)

Keep in mind that ordinary UltraVNC, the SCPrompt project, and other derivatives also have repeater support.

[supercoe]

Once InstantSupport has been "Installed as Service" it will reconnect until it is uninstalled.

If you don't install the service as long as the InstantSupport application is running it will continue to reconnect back to the repeater.

[B]

So what do you recommend he do? He wants to keep his techs from reconnecting. It sounds like he's going to have to trust them to do their jobs and either (a) close InstantSupport while disconnecting or (b) refrain from reconnecting.

[supercoe]

I want to make sure my version of ChunkVNC is only used for internal tech support with the users knowledge and also is not set up as a "backdoor" to let users back into their PC's from outside the office

Don't forward port 5901, this will disable the ability for ChunkViewer to connect outside of your local LAN.


I Do Want a user to be able to start a remote help session and walk away while a tech is fixing their problem, but when the tech is through I do not want the tech to be able to "pop back in" a couple of hours after being invited in the first time without the user "server" making another request

Not sure how to answer this one.
Close/Uninstall InstantSupport or trust/fire your employees.


In the ultravnc.ini I have set the IdleTimeout=900 [the idea is that after 15min of inactivity the server closes]

I've never tested this setting but I doubt it would work since the server is being passed the auto reconnect command.


Is there anything else I can do to make sure the program is used as we intend it to be used.

You bet! The source code is already in your hands, modify the script as you see fit.

[B]

Here's a thought for jaustill -- every time your custom version is launched, programmatically schedule a Windows task that will, in x minutes, stop any VNC processes and delete/uninstall all traces of ChunkVNC or other VNC, including temp directories, registry entries, etc. Shouldn't be too hard to do.

I'm sure there are other, better ways too.

[jaustill]

Thanks for all the ideas, I am giong to try them all.