Accept Reject Prompts

[davidgrudek]

QuerySetting=4
QueryTimeout=15
QueryAccept=0
QueryIfNoLogon=0

With this I would expect it to do the following:

If accept is pressed with the accept reject prompt to accept the connection
If reject is pressed with the accept reject prompt to reject the connection
If nothing is pressed in the 15 seconds with the accept reject prompt to reject the connection
If logged off then no accept reject prompt
If pc is locked then no accept reject prompt


But what happens if the machine is logged off or locked it automatically rejects instantly saying authentication rejected. If it is to not query on a logged off and locked state, I would think it should just go in. Can someone please help and let me know what I am doing wong. This used to work in 1.0.8.2. I need the above to happen, is this possible? If not could you provide a way to make it happen?

[davidgrudek]

Anyone? This is a huge security concern for our company.

[davidgrudek]

I think this is a problem in the code. Can someone please just confirm this? I need to tell management something.

[Rudi De Vos]

Can't tell without analysing source, let you know when done.

[davidgrudek]

Thanks. I really appreciate it.

[Aergan]

I am experiencing the same issue and get asked frequently day to day from colleagues about this as "it used to work". Any help would be much appreciated.

[Rudi De Vos]

I'm having trouble repeating it...
When no user is logged ->it doesn't show the popup and access is allowed

When screen is locked it use the default timeout value.
QueryAccept=0 -> Logon rejected when screen is locked by user
"Your connection has been rejected"

This part was changed on request but in 2008, is 1082 already that old ...

Code: Select all

// 10 Dec 2008 jdp reject/accept all incoming connections if the workstation is locked
 if (vncService::IsWSLocked() && !m_server->QueryIfNoLogon()) verified = QueryAccept()

Without code change this behaviour can't be changed.
You even need an extra parameter, AllowAccessOnLockedWs i don't see any way with current parameters.

[davidgrudek]

Yes that is the problem. Automatically rejected.

We want it to ignore the accept reject if locked or logged off.

if logged in to reject if nothing is pressed. if logged in and reject is pushed then reject and if logged in the accept if accept is pressed.

[davidgrudek]

Is this something that could be fixed for us?

[Aergan]

Could we request this change please? Having the extra parameter would hopefully grant us the behavior we want from UltraVNC.

[Rudi De Vos]

Try server 10963

-patch multimon
-patch ntlm

-QueryAccept (0/1) added special value (2)
2 is the same as 0, only it allow locked screens

Please test ...
Made changes, recompiled but didn't had time to test it fully

http://www.uvnc.eu/download/10963

[Aergan]

Many thanks, will test and report back.

[Aergan]

Hi Rudi,

Many thanks for adding this feature, it's working quite well now and functioning with the QueryAccept=2 as we would like it to. If this change is added into the main build, can the GUI's be updated to configure this option please? (E.g. uvnc_settings.exe).

Slightly off-topic,
Unfortunately, I am having an issue on this build where the desktop theme is dropping Aero despite RemoveAero=0 and the mirroring driver being installed. This can be an issue because we have a few GDI and Direct2D/DirectDraw accelerated applications that crash or use drastically more resources when changing from Aero to Basic/Classic whilst they are still running. Any ideas why that might be happening with this build?
OS: Windows 7 Enterprise x64 SP1 with mv2 hook display x64 driver (From 1.0.9.6.1 full install)

[LividLucifer]

Hi Aergan,

Just responding to your off-topic issue regarding Aero dropping off your remote sessions. The mirror driver itself causes this, when mirror drivers are loaded in Windows Vista/7, they disable the Desktop Window Management service (DWM.exe) - this disables the Aero theme. For more info, see http://msdn.microsoft.com/en-us/library ... s.85).aspx

Hope this helps!

[Aergan]

Ah ok, that explains it. Working (although quite a bit slower) with disabling the mirror driver.

[zorzy]

Hi everyone!

I spent some time searching for Accept/Reject support when using UVNC with repeater.
As I understand, connection is created from server side, so prompt is not possible.

Anyone with similar demand/experience?