Update: UltraVNC 1.4.3.6 and UltraVNC SC 1.4.3.6: viewtopic.php?t=37885
Important: Please update to latest version before to create a reply, a topic or an issue: viewtopic.php?t=37864

Join us on social networks and share our announcements:
- Website: https://uvnc.com/
- GitHub: https://github.com/ultravnc
- Mastodon: https://mastodon.social/@ultravnc
- Facebook: https://www.facebook.com/ultravnc1
- X/Twitter: https://twitter.com/ultravnc1
- Reddit community: https://www.reddit.com/r/ultravnc
- OpenHub: https://openhub.net/p/ultravnc

ms login group 3 = full access?

Should you have problems with the MS logon plugin, here's the place to look for help or report issues
Post Reply
sgt-d
40
40
Posts: 81
Joined: 2005-03-29 04:46
Contact:

ms login group 3 = full access?

Post by sgt-d »

i am running two global groups on my nt4 domain controller, vncadmins and vncusers.

for that machine and for win9x clients in that domain i am using ms login (not ms login ii).

in ms login, the 1st group is set to vncadmins (all caps), the 2nd group is intentionally left blank and the 3rd group is set to vncusers (all caps).

the problem is that any user in the vncadmins or vncusers group is granted full access, even though members of the vncusers group should be restricted to view only (based on the information on the ms login dialog text/help).

can anyone else confirm this behavior?

-sgt
User avatar
Rudi De Vos
Admin & Developer
Admin & Developer
Posts: 6832
Joined: 2004-04-23 10:21
Contact:

Post by Rudi De Vos »

Try to remove authadmin.dll if the client is win9.x

+This grant access to local admins, could be a prob on 9.x
+Check if user is not in the 2 groups
sgt-d
40
40
Posts: 81
Joined: 2005-03-29 04:46
Contact:

Post by sgt-d »

on the win9x box i moved authadmin.dll out of the ultravnc folder and restarted the service - i then logged in with the test account again - but i still had full access. the test user account is only in the vncusers group, and vncusers is only in group 3 of ms login.
merv

Post by merv »

I'm having the same problem too, not only with Win9x but also with Win NT...

I'm using MS-Logon I for my NT systems in a Windows 2000 domain.

I know that I could have used MS-Logon II but there is too much trouble for me to upgrade all of my clients with the Security Configuration Manager and the latest IE, as I'm trying a remote installation here.

The 3rd group View-Only access doesn't seem to work as the group that I set here is granted full-access. I've tried both local and domain groups (non-admin) for the 3rd group and they end up having full-access instead of view-only. None of the users in group 3 are members of groups 1 and 2.

The latest UltraVNC version was used. I believe it's RC20.5.
Marscha
Former moderator
Former moderator
Posts: 464
Joined: 2004-05-14 06:48

Post by Marscha »

For MS-Logon II it's not really neccessary to have the Security Configuration Manager installed on NT4.
You need SCM only if you want to use the GUI for security groups configuration ("Configure MS-Logon groups").
If you use MSLogonACL, you can do without SCM.
merv
Posts: 4
Joined: 2005-06-02 17:07

Post by merv »

Thanks Marscha.

I tried to import a pre-edited ACL.TXT file using MSLogonACL and it worked without requiring an installation of SCM.
Post Reply