Just a question on UAC

[bakerkr]

Over in the PcHelpware forum, the below post works for PcHelpware.. is there no way to use this as solution for ChunkVNC??

http://forum.ultravnc.info/viewtopic.ph ... 0254dcab34

Thanks
Kevin

[supercoe]

This has been discussed many times in the past (search the forum for more information).

Basically what it boils down to is that disabling UAC by making this registry change still requires administrator privileges.

It is not possible to disable UAC without at least one UAC prompt to give the program permission to disable it.

Since this is the case it makes more sense to simply use the "Install as Service" method so you can just control the UAC prompts instead of disabling them.

[bakerkr]

ok.. I think I know what you are saying.. even when I run the Pchelpware app the user had to "allow" it the first time... sorry about that.

Kevin

[supercoe]

No problem, I choose to not run InstantSupport as admin right away as I have domain users I need to support that don't know what the admin password is.

[denisalvesbh]

Hello everyone
Firstly I would like to thanks the team of programmers UltraVNC andChuncVNC.
I also had a problem with UAC, did research and found this blog post with this http://autoitscripts.blogspot.com.br/20 ... ripts.html about Autoit.

At the beginning, the first line of my files .au3 I used the following command line:

; This script requires full Administrative rights
# requireadmin

So every time you open the Instantsuporte.exe necessarily have to open the administrative privileges
and this feature also serves to "install service"

I thank all
and I apologize for my English

[supercoe]

Thanks for the tip, but as I stated right before your post I choose not to run as admin immediately for design reasons.
support customers that are on a domain and they do not have the admin password so running as admin is not an option.

[LFCavalcanti]

Hello!

I'm new here so forgive me if I posted in the wrong place.

I have the same issue with the UAC, but my problem is not with the UAC itself, but when the promt comes up, I can't use my keyboard on the Client.

There is any way to catch this promt and allow me to put the login data?

If not... there is a way to create a auto-installation, so I can install the "exe" on the clients with Service Mode using a GPO.

[supercoe]

You will not be able to control UAC prompts without installing InstantSupport as a service first, this is how UAC works.

Sadly at this point in time I do not have an option to enter credentials before installing as a service, this will be fixed in the next release.
I believe Rat's ChunkVNC fork (search for the thread) supports this, you may want to ask him.
In the mean time a user at the local machine has to enter the credentials.

You could create an auto install via GPO as you have all the source code but this seems odd to me.
Remember, ChunkVNC is just a wrapper to UltraVNC. If you were to want to deploy on a domain I'd suggest just deploying UltraVNC.

[LFCavalcanti]

Hi!

I'm a IT Manager on a Service Provider, we have 19 clients, each one with a different domain and environment. So UltraVNC in it's pure release is not an option for us.

Chunk VNC is almost what I need... It uses the Repeater, autogenerate an ID, has a good performance over Internet.

Create a deployment tool for each client is not an issue for my team, but we need some ground:
When we chose to install the InstantSuport as a Service, it requires an ID. Can you give me some tip to change that, and even in Service mode it generates the ID?

[supercoe]

Maybe I'm confused as to what you are asking...

Yes when you install as a service it allows you to choose an ID number, by default it is set to the randomly generated ID that is first shown to you.

If you are asking why installing as as service requires an admin level password, this is how user account control works.
Sadly I don't have an option (yet) to put the admin credentials in before it tries to install as a service (which then prompts for admin credentials).
Since you cannot control UAC prompts until after it is installed as a service you have to have the local user type in the credentials.

I made a note to change this in the future so you will be able to type in the admin credentials before it prompts UAC.

Keep in mind that ChunkVNC does nothing special, it simply sets up the UltraVNC server to connect to the repeater, this can be easily accomplished with the "pure release" as I'm doing nothing but passing command line arguments to the UltraVNC server.

Good luck!

[LFCavalcanti]

Hi!

Maybe I explained it wrong.

We can use a GPO with VBScript to install the Server(as a service) with Admin credentials. There's even a thread here explaining one way of doing it.

I don't have problem with creating scripts for each client. I'm testing something: With a VBScript running under SYSTEM account(Granted by the GPO), the Script is able to recover the domain NETBIOS name and use it in the credentials data to install the InstantSupport Server as a service. The only odd is that I'll have to create an account with the same data in every client and find a way to encrypt the password within the script or in a encrypted file.

Be sure if I do this, I'll share the information and code here.
About my real problem:
- Everytime I try to install the InstantSupport Server as a service it prompts me requiring an ID. How can I supress this message and install the service allowing the Server to auto generate an ID when it starts or when the user open the interface?
I know this could require changing the behaviour of the code, because it may cause some problems:
1 - Every time the Service comes up in every Client PC, my repeater will receive the connection with the ID auto generated.
2 - This also may cause a high load on my Repeater Server.

I read the code from the InstantSupport file and seems that when it starts the service, the connection to the Repeater is started with it. Is that Right?

Can I change that? Like:
1 User starts the PC
2 The Service comes up, but don't connect to the repeater.
3 User needs support.
4 Click and open the InstantSupport.exe
5 Click in a button like "Connect"
6 The Server connects with the Repeater.

[supercoe]

- Everytime I try to install the InstantSupport Server as a service it prompts me requiring an ID. How can I supress this message and install the service allowing the Server to auto generate an ID when it starts or when the user open the interface?

I still believe you are confused as to what InstantSupport is, it's just a wrapper, all it does it setup the UltraVNC server which is the service.
InstantSupport isn't a service, all it is doing is passing the install service command to UltraVNC and configuring the ultravnc.ini file.


If you still want to pursue what you're talking about, open the InstantSupport.au3 file located in the Source Code directory and comment out lines 288 and 289 to remove the popup during service installation. Remember to compile again.

Code: Select all

				; Choose ID for service installation.
				WinSetOnTop( $str_Program_Title, "",0 )
				$IDNumber = InputBox( $str_MsgBox_ServiceInstallation, $str_ServiceEnterAnIDNumber, $IDNumber ) +0

I know this could require changing the behaviour of the code, because it may cause some problems:
1 - Every time the Service comes up in every Client PC, my repeater will receive the connection with the ID auto generated.
2 - This also may cause a high load on my Repeater Server.

The repeater can handle thousands of connections, the limiting factor is generally bandwidth which isn't an issue unless you are viewing.
Also keep in mind that I do not recommend leaving the service installed for longer than a few hours with the current included UltraVNC version as it has problems reconnecting after awhile.
You can fix this by replacing the InstantSupport_Files\winvnc.exe file with the newest UltraVNC release and compiling again.


I read the code from the InstantSupport file and seems that when it starts the service, the connection to the Repeater is started with it. Is that Right?

InstantSupport will create a socket connection to the repeater just to verify that it is there, this helps me when I'm troubleshooting network issues with other ChunkVNC users and is not needed for InstantSupport to be functional.
Once it knows the repeater exists it will launch the UltraVNC server by passing command line arguments to it so UltraVNC then connects to the repeater.


Can I change that? Like:
1 User starts the PC
2 The Service comes up, but don't connect to the repeater.
3 User needs support.
4 Click and open the InstantSupport.exe
5 Click in a button like "Connect"
6 The Server connects with the Repeater.

I don't know, can you?
All jokes aside, yes this would be possible but don't expect me to do it for you.
I'd say give it a try, the project is open source after all.

Personally though, I don't like leaving the program on my customers machine because if I want to make an update to the software it's much more difficult to roll out than just having them download it from my website every time.

[LFCavalcanti]

Hi!

Well, I'm already doing it... from the past two days I spent my free time learning to code in AutoIT.

I'll create a Thread explaining my changes in a few days.

I want to create a new Server and Viewer. The server will connect to the repeater as I said: Only when the user call the instant support.

The server will also capture and display information about the PC .

Another thing I'll try is use a Database, like MySQL, to control the IDs already in use, so if the server generates an ID number already in use, it will generate another one.
The database will be also used to logging purposes.

Thank you for the information so far.

[supercoe]

No problem, it would be awesome if you shared your code as other users might find it useful.

[LFCavalcanti]

No problem, it would be awesome if you shared your code as other users might find it useful.

I will. I use a lot of open source projects here: PFSense, NuxeoDM, Debian, etc...