Update: UltraVNC 1.4.3.6 and UltraVNC SC 1.4.3.6: viewtopic.php?t=37885
Important: Please update to latest version before to create a reply, a topic or an issue: viewtopic.php?t=37864

Join us on social networks and share our announcements:
- Website: https://uvnc.com/
- GitHub: https://github.com/ultravnc
- Mastodon: https://mastodon.social/@ultravnc
- Facebook: https://www.facebook.com/ultravnc1
- X/Twitter: https://twitter.com/ultravnc1
- Reddit community: https://www.reddit.com/r/ultravnc
- OpenHub: https://openhub.net/p/ultravnc

Disable administrators group?

Should you have problems with the MS logon plugin, here's the place to look for help or report issues
Post Reply
spud
Posts: 3
Joined: 2006-10-27 15:15

Disable administrators group?

Post by spud »

I have a bunch of machines that are not part of a domain and only use local security.

Is there any way to only use the MS Logon I groups that I specify, but not allow the Administrators group to have access?
bevtech
800
800
Posts: 2168
Joined: 2005-08-03 14:07
Location: Pennsylvania, United States

Re: Disable administrators group?

Post by bevtech »

you should be able to limit uvnc by username using the mslogon authenication..

But for uvnc to function as a service you need to have admin rights.


You could try application mode just not sure how the mslogon will like that..;)
Bevtech

Windows XP Home, Pro SP2, Windows 2003 SBS server SP2(EN), Windows Media Center Editon 2005,Windows Vista Home Prem.,Fedora Core 6,Win9X, PChelpware Rel 1.0,
UVNC V 1.0.8.2

User not developer..;)
spud
Posts: 3
Joined: 2006-10-27 15:15

Re: Disable administrators group?

Post by spud »

The problem is not what rights it takes to run the VNC server service, the problem is the fact that any user who has a local account on these machines can also remote to those machines. This is because all the users who have accounts on these machines are in the "administrator" group. I am trying to limit who can use VNC to remote control to these machines, but the default install seems to always allow the "administrator" group full access. Changing the groups in the "configure MS Logon Groups" screen doesn't change the default "administrator" group's rights to do remote control to a machine.
bevtech
800
800
Posts: 2168
Joined: 2005-08-03 14:07
Location: Pennsylvania, United States

Re: Disable administrators group?

Post by bevtech »

hmm how about this??

ou can limit ips with Authost this may be an option


[post=17374][/post]

Limit by subnet..Just an idea but mslogon should be able to use any account for authenication. Cant you just create an account with restricted access??


I personally only use classical authenication with complex 8 char passwords along with the dsm plugins..;) that way you could always have different passwords for UVNC on different servers..
Bevtech

Windows XP Home, Pro SP2, Windows 2003 SBS server SP2(EN), Windows Media Center Editon 2005,Windows Vista Home Prem.,Fedora Core 6,Win9X, PChelpware Rel 1.0,
UVNC V 1.0.8.2

User not developer..;)
spud
Posts: 3
Joined: 2006-10-27 15:15

Re: Disable administrators group?

Post by spud »

Limiting by IP address won't work because we use DHCP. There are a number of techs who would need to use UVNC to support our users and these techs all would have DHCP addresses.

The problem is I need to be sure that no other people in our environment can remote to these machines. I was really hoping there was a way to only allow a specific "remote-access" group in the MS Login I screen and not have to worry about all the "administrators" group having access.
bevtech
800
800
Posts: 2168
Joined: 2005-08-03 14:07
Location: Pennsylvania, United States

Re: Disable administrators group?

Post by bevtech »

Try Mslogon II should let you specify user groups or if nothing else a user account
Bevtech

Windows XP Home, Pro SP2, Windows 2003 SBS server SP2(EN), Windows Media Center Editon 2005,Windows Vista Home Prem.,Fedora Core 6,Win9X, PChelpware Rel 1.0,
UVNC V 1.0.8.2

User not developer..;)
Post Reply