How about the ability to remove the VNC server admin properties from users?
Ideally, this would be set via network group policies, but for those without group policy environments, perhaps there could be a registry setting or something that would remove the admin capabilities.
This has come up as we would like to have the VNC system tray icon available, but don't want the users messing with the pushed out server settings.
Any suggestions?
Thanks.
Update: UltraVNC 1.4.3.6 and UltraVNC SC 1.4.3.6: https://forum.uvnc.com/viewtopic.php?t=37885
Important: Please update to latest version before to create a reply, a topic or an issue: https://forum.uvnc.com/viewtopic.php?t=37864
Join us on social networks and share our announcements:
- Website: https://uvnc.com/
- GitHub: https://github.com/ultravnc
- Mastodon: https://mastodon.social/@ultravnc
- Facebook: https://www.facebook.com/ultravnc1
- X/Twitter: https://x.com/ultravnc1
- Reddit community: https://www.reddit.com/r/ultravnc
- OpenHub: https://openhub.net/p/ultravnc
Important: Please update to latest version before to create a reply, a topic or an issue: https://forum.uvnc.com/viewtopic.php?t=37864
Join us on social networks and share our announcements:
- Website: https://uvnc.com/
- GitHub: https://github.com/ultravnc
- Mastodon: https://mastodon.social/@ultravnc
- Facebook: https://www.facebook.com/ultravnc1
- X/Twitter: https://x.com/ultravnc1
- Reddit community: https://www.reddit.com/r/ultravnc
- OpenHub: https://openhub.net/p/ultravnc
Disable server admin capabilities
Winvnc... Admin properties... Misc
[X] Disable Client Options in tray icon menu
valid for user limited access level
but if user have administrator level access that have no effect until a Group Policies disable his right access locally or remotely.
[X] Disable Client Options in tray icon menu
valid for user limited access level
but if user have administrator level access that have no effect until a Group Policies disable his right access locally or remotely.
UltraVNC 1.0.9.6.1 (built 20110518)
OS Win: xp home + vista business + 7 home
only experienced user, not developer
OS Win: xp home + vista business + 7 home
only experienced user, not developer
- Rudi De Vos
- Admin & Developer
- Posts: 6862
- Joined: 2004-04-23 10:21
- Contact:
Admin properties.
Vnc check if the user has access to manage the service manager.
Current use can manipulate services --> admin props
no access->admin probs disabled.
If a user see the admin properties, he always can change and overwrite them via other methods.
Granting "service manager access" is granting full controle to the PC.
There is a registry setting that block changes for everybody, including admin.
Once set, only registry can be used to unset.
check
Alloweditproperties
Vnc check if the user has access to manage the service manager.
Current use can manipulate services --> admin props
no access->admin probs disabled.
If a user see the admin properties, he always can change and overwrite them via other methods.
Granting "service manager access" is granting full controle to the PC.
There is a registry setting that block changes for everybody, including admin.
Once set, only registry can be used to unset.
check
Alloweditproperties
Terrif,Rudi De Vos wrote:Admin properties.
Vnc check if the user has access to manage the service manager.
Current use can manipulate services --> admin props
no access->admin probs disabled.
If a user see the admin properties, he always can change and overwrite them via other methods.
Granting "service manager access" is granting full controle to the PC.
There is a registry setting that block changes for everybody, including admin.
Once set, only registry can be used to unset.
check
Alloweditproperties
Once these settings are configured the way you want in the registry, you can go a step further and block access to them via group policy.
I haven't had much trouble there - I just still can't build a decent MSI file that works correctly.
-Brian
So, what is the registry key and setting to achieve this? "AllowEditProperties? Is it a DWORD? What registry key does it need to be under?Rudi De Vos wrote:...There is a registry setting that block changes for everybody, including admin.
Once set, only registry can be used to unset.
check
Alloweditproperties
Thanks.
- Rudi De Vos
- Admin & Developer
- Posts: 6862
- Joined: 2004-04-23 10:21
- Contact: