Update: UltraVNC 1.4.3.6 and UltraVNC SC 1.4.3.6: viewtopic.php?t=37885
Important: Please update to latest version before to create a reply, a topic or an issue: viewtopic.php?t=37864

Join us on social networks and share our announcements:
- Website: https://uvnc.com/
- GitHub: https://github.com/ultravnc
- Mastodon: https://mastodon.social/@ultravnc
- Facebook: https://www.facebook.com/ultravnc1
- X/Twitter: https://twitter.com/ultravnc1
- Reddit community: https://www.reddit.com/r/ultravnc
- OpenHub: https://openhub.net/p/ultravnc

Prob with Domain Admins grp + FastPush (or "Help with ACL")

Should you have problems with the MS logon plugin, here's the place to look for help or report issues
Post Reply
VNCNewbie
Posts: 2
Joined: 2006-03-08 00:05

Prob with Domain Admins grp + FastPush (or "Help with A

Post by VNCNewbie »

Greetings all,

I was trying to get FastPush working with UltraVNC in my domain. I got everything working fine, but I want to use MS Login for security. I want everyone in the Domain Admins group to be able to VNC in, but I can't seem to get FastPush to install with that configuration. I tried the advice from this guy:
http://www.computerworld.com/blogs/node/789
but just putting my acl.txt (which i exported with MSLogonACL.exe to get:
allow 0x00000003 BUILTIN\Administrators
allow 0x00000003 "..\Domain Admins"
) in the FastPush directory didn't do it.

I had already installed it on one system with those groups having access, so I thought I could use regdir.exe to have a look at the ACL value in HKLM\Software\orl\winvnc3 and just manually input what I found into the machine.ini. Unfortunetly, regdir.exe has a limit to how much it will output (trust me, I tried everything...) and all I could get was:
ACL = REG_BINARY 0x00000044 \...

So, I thought I would try to export it from the registry (using reg export) but it comes out as a hex value. I need binary!

So, I'm at my wit's end folks. Any suggestions? (with my luck, it will probably be something simple and I've just blown half a day trying to find some workaround solution)

'tanks,

K
Marscha
Former moderator
Former moderator
Posts: 464
Joined: 2004-05-14 06:48

Post by Marscha »

hmm, I don't know how Fastpush works regarding the acl.
In your case it should be possible to export the ACL with regedit and also import it on a new machine with regedit.
I don't see any problem with the hex value.

Note: Exporting/Importing the acl via regedit should work here because
  • BUILTIN\Administrators is a well-known group with the same SID on all machines and
  • "..\Domain Admins" refers always to the same group with a given SID (as long as .. points to the same domain).
VNCNewbie
Posts: 2
Joined: 2006-03-08 00:05

Found a way

Post by VNCNewbie »

All I did was copy the correct reg key by putting this line in the vcn.cmd file:

reg copy HKLM\Software\ORL\WinVNC3 \\%targetpc%\HKLM\software\ORL\WinVNC3 /f

(make sure you put it in an appropriate location. I put it right before the VNC service starts. That way you don't have to wait until the user reboots in order for the groups to become effective.)

You just have to make sure that you have the groups set up the way you want on the machine that you're pusing down from.

Thanks,

K
Post Reply