MS authentication

[joefu]

I know that if you use MS authentication it will allow all administrators in. Is there a way I can configure it to only let that group in and not my administrators? :troll:

[ipsec]

you can specify either a local group on that computer or one over the domain with the domain checkbox if it is part of the domain specified. MSloginII alows multiple domain groups, havent tested it.

[joefu]

I created a group on my local machine and assigned one person in the group. The person has no admin powers however my local administators can still get access to computer. When you setup the group in Ultravnc it also tell you in the rules "[u][i][b]That local admin alway have access.[/b][/i][/u]"

I don't want my admin's to have access. I just want the group I specify. :oops: [/img]

[ipsec]

I created a group on my local machine and assigned one person in the group. The person has no admin powers however my local administators can still get access to computer. When you setup the group in Ultravnc it also tell you in the rules "That local admin alway have access."

I don't want my admin's to have access. I just want the group I specify. [/img]

Im pretty sure both MS login and MSloginII both allow local admins to the computer access... Marscha can shed more light or we can search a bit more and I believe there is an explanation.

[Rudi De Vos]

From whatsnew.txt

**RC19.3
MSlogon I changes

logging.dll: needed, does event and file logging
authadmin.dll: if present, give localadmin access
workgrpnt4.dll: Workgroup and NT4 domain checking
ldapauth.dll:Active directory W2K up
ldapauth9x.dll:Active Directory 9X
ldapauthnt4.dll:Active Directory NT4

[Marscha]

MSLogon II does not allow access to local admins without explicit configuration.

But you should always be aware that any local admin can change the UltraVNC configuration locally.
There is no way to restrict local admins from changing registry keys etc.

[joefu]

That was it. I used ms authenication II. I like to thanks every for the help.