Update: UltraVNC 1.4.3.6 and UltraVNC SC 1.4.3.6: viewtopic.php?t=37885
Important: Please update to latest version before to create a reply, a topic or an issue: viewtopic.php?t=37864

Join us on social networks and share our announcements:
- Website: https://uvnc.com/
- GitHub: https://github.com/ultravnc
- Mastodon: https://mastodon.social/@ultravnc
- Facebook: https://www.facebook.com/ultravnc1
- X/Twitter: https://twitter.com/ultravnc1
- Reddit community: https://www.reddit.com/r/ultravnc
- OpenHub: https://openhub.net/p/ultravnc

Customized installation of UltraVNC - Use of MSLogonACL

Post Reply
vkrysiak
Posts: 4
Joined: 2016-11-22 15:23

Customized installation of UltraVNC - Use of MSLogonACL

Post by vkrysiak »

Hi all,

We need to deploy UltraVNC in our company and need to customize the installation : change the Language, the Default Installation directory, choose the UltraVNC Server and the UltraVNC Viewer (not the repeater).
We launched the setup and generated a .inf file.
Now, we need to customize the admin properties : we have to select "Display Query Window" with a timeout of 10s, we want an authentification based on a local user account (so I've selected the "Require MS Logon" and "New Ms-Logon"). I've configured MS Logon Groups ( I choose a local user account).
First question : how to obtain a .ini file with the parameters below in order to use it in a batch file ?
Second question : for all the parameters which concern the authentification MS-Login ,I've used the mslogonACL executable in order to generate an output file (mslogonacl /o file.txt) and then, I wanted, on a "new Pc", to perform a new installation and import this output file (with the command mslogonacl /i file.txt) : the command succeeded but the fields "Require MS Logon" and "New MS-Logon" were not selected and no account was declared.
So, my question is : is there a documentation which explains how to perform a customized installation in order to deploy it ?
Can you tell me how to proceed ? Did I forget something ?

Thanks for your help.

Valerie
Paris, France
User avatar
Rudi De Vos
Admin & Developer
Admin & Developer
Posts: 6832
Joined: 2004-04-23 10:21
Contact:

Re: Customized installation of UltraVNC - Use of MSLogonACL

Post by Rudi De Vos »

1)
ultravnc.ini
Use a refference PC, ( like your own local pc)
Make all changes and save, use this ultravnc.ini for all other PCs. The ini file is portable and contain all vnc settings.
2)
Fields are in ultravnc.ini. You just need to tell your local PC that the mslogon is used...it's also saved in the ini

Customize settings after install
*copy ultravnc.ini
*if mslogon is used, use mslogonacl to import settings
*restart uvnc_service or reboot ( some settings in the ini are only red on start)

If you don't need a uninstaller, you also can zip your local uvnc folder, add the fle.txt for acl if required
*Unzip remote
*mslogonacl to import settings
*winvnc.exe -install ( install service)
You best run winvnc.exe manual 1x, to register himself with the firewall before you start the service
( net start uvnc_service) or add the required ports/program to your firewall with a script

This we run in the installer after files are copied

Code: Select all

WinVNC.exe -install
net start uvnc_service"
{sys}\netsh firewall add portopening TCP 5900 vnc5900
sys}\netsh firewall add portopening TCP 5800 vnc5800
sys}\netsh firewall add allowedprogram ""{app}\winvnc.exe"" ""winvnc.exe" " ENABLE ALL"
vkrysiak
Posts: 4
Joined: 2016-11-22 15:23

Re: Customized installation of UltraVNC - Use of MSLogonACL

Post by vkrysiak »

Other question:

what's the usage of UltraVNC launcher ?
It's installed but we think we don't need it (I had a previous version of UltraVNC - the V1.2.0.1 and don't have this component).

Regards,

Valerie
User avatar
Rudi De Vos
Admin & Developer
Admin & Developer
Posts: 6832
Joined: 2004-04-23 10:21
Contact:

Re: Customized installation of UltraVNC - Use of MSLogonACL

Post by Rudi De Vos »

When you make a viewer connection, you can save the viewer connection settings as a .vnc file.
So next time you run you can use this file to start the viewer with the same settings.

The launcher collect the .vnc, and use an extra encrypted file to save the User/passwd for the connections.
It's a shell around the viewer setting files.
vkrysiak
Posts: 4
Joined: 2016-11-22 15:23

Re: Customized installation of UltraVNC - Use of MSLogonACL

Post by vkrysiak »

Rudi,

Thanks for your answer : for security reasons, we will not use the launcher (we don't want an encrypted local file with the username/password in it).
We didn't find how not to install it : do you have any hints ?

Other question : it seems that even if we set the authentification on a local account, we need to set a VNC password and the passsword appears in the ultravnc.ini file (I have 2 lines : passwd= and passwd2= ).
Is it possible to remove the VNC password ? If not, what kind of password is recommanded ("strong" password ?).

Thanks for your help.

Valérie
User avatar
Rudi De Vos
Admin & Developer
Admin & Developer
Posts: 6832
Joined: 2004-04-23 10:21
Contact:

Re: Customized installation of UltraVNC - Use of MSLogonACL

Post by Rudi De Vos »

The launcher use a EAS encrypted files with user provided password.
This file is more secure then the OS saved passwords :)
The installer don't have the option to not install it, but as you gonna run a script after install, just remove the exe.

The passwd fields need to have some value, even when you disable the vnc passwords.
A vnc password is not secure and only suitable for local lan.
Use mslogon or the encryption plugin. In both cases you can set a longer password and the vnc passwd is NOT used.
But you still need to set something to avoid the empty password error...
Post Reply