[MSLogon, Registry] Reconfigure uvnc settings remotely

[MSLogon, Registry] Reconfigure uvnc settings remotely

Postby negh_var » 2011-03-31 06:39

ok here's the problem:

Installed uvnc on about 70 pc's. Configured them with a local p/w and also configured them to use an active directory domain group.

Now I want to change the groups listed to include another one.

I had a look in the ultravnc.ini file and no groups are listed even though I *haven't* selected the option to disable ini and use registry.

What's a quick way to update all my clients to the same settings?

I thought I could simply stop the service, copy the ini file, start the service and it'll all be fine but it aint' working.
Last edited by negh_var on 2011-03-31 20:45, edited 1 time in total.
negh_var
 
Posts: 7
Joined: 2010-03-05 02:22

Re: Reconfigure uvnc settings remotely

Postby Bonji » 2011-03-31 20:34

MSLogon credentials are stored in the registry regardless.

You can push registry settings to each computer (which is what I do), but you have to be careful if you set local computer accounts (like the local Administrator) because the SID is different on every computer. Domain accounts are simple to push because they will be the same for every computer.

I initially used a hybrid approach where I pushed registry settings for my domain accounts and then used the MSLogonACL.exe program to grant the local admin rights. You could also use the MSLogonACL.exe program exclusively.

I now push all permissions via the registry, but I get the local computer SID first so I can determine the appropriate local Administrator SID to add.

TLDR version: MSLogonACL.exe is the easiest way to set MSLogon permissions across multiple computers.
-Ben
Bonji
100
100
 
Posts: 325
Joined: 2008-05-13 14:54

Re: [MSLogon, Registry] Reconfigure uvnc settings remotely

Postby negh_var » 2011-03-31 22:35

Ok so from what I understand I still do what I'm doing and push out the ini file as that would configure uvnc to use the domain groups however if I don't have the groups SID in the registry the logins wont' work?

So I either have to push out the reg settings and ini file at the same time or visit each machine individually??

Can I ask what method you use (the actual process) to configure the clients remotely?
negh_var
 
Posts: 7
Joined: 2010-03-05 02:22

Re: [MSLogon, Registry] Reconfigure uvnc settings remotely

Postby sbostedor » 2011-04-07 11:02

With VNCScan, we push out the INI files first, then update the registry remotely, then restart the service remotely so that everything takes effect. Does that help?
Steve Bostedor
http://www.vncscan.com
Super Simple UltraVNC Management
sbostedor
100
100
 
Posts: 273
Joined: 2005-02-02 19:30
Location: Jackson, MI, USA

Re: [MSLogon, Registry] Reconfigure uvnc settings remotely

Postby negh_var » 2011-04-08 00:40

Sounds like a good plan but we currently use both RealVNC Enterprise and UltraVNC at my company. My big push to use UVNC is the cost saved as that does what we are using RVNC Enterprise for.

If I have to include cost for VNCScan, it makes an arguement pointless, even though the cost reduced a heap.

I'll work on maybe a simple batch file that will do the change following your process and see how I go.

sbostedor wrote:With VNCScan, we push out the INI files first, then update the registry remotely, then restart the service remotely so that everything takes effect. Does that help?
negh_var
 
Posts: 7
Joined: 2010-03-05 02:22

Re: [MSLogon, Registry] Reconfigure uvnc settings remotely

Postby B » 2011-04-08 21:42

That's what I think Steve meant, telling you how he does it so you could mimic it. I don't think he was selling.
B
Super-Mod
Super-Mod
 
Posts: 2347
Joined: 2009-09-09 14:05


Return to 1.0.9.5 (stable)

Who is online

Users browsing this forum: No registered users and 2 guests

cron