Update: UltraVNC 1.4.3.6 and UltraVNC SC 1.4.3.6: viewtopic.php?t=37885
Important: Please update to latest version before to create a reply, a topic or an issue: viewtopic.php?t=37864

Join us on social networks and share our announcements:
- Website: https://uvnc.com/
- GitHub: https://github.com/ultravnc
- Mastodon: https://mastodon.social/@ultravnc
- Facebook: https://www.facebook.com/ultravnc1
- X/Twitter: https://twitter.com/ultravnc1
- Reddit community: https://www.reddit.com/r/ultravnc
- OpenHub: https://openhub.net/p/ultravnc

Local Permissions Questions

Should you have problems with the MS logon plugin, here's the place to look for help or report issues
Post Reply
yepyep
Posts: 4
Joined: 2007-02-20 23:09

Local Permissions Questions

Post by yepyep »

Alrighty... I have UltraVNC 1.0.2 install on a Windows XP machine running as a service. I am using MSLogin1 to authenticate users.

When a user that is setup properly in the "Configure MS Login Groups" tries to connect to the VNC Server with thier domain credientals, they are unable to login and get a "VNC Authentication Failed" error unless they are an administrator on the machine that is running the VNC Server.

I guess I am asking if a user has to be an administrator on the local machine of the vncserver to be able to connect to it via vnc viewer. I scowered these forums looking for someone with similar issues, and came across a few posts that were somewhat related, but didnt really help.

I have tried connecting to the vncserver with all the variations of usernames, ie user@domain.local, domain\user, etc

the WinVNC-authSSP.log did not help either

I assume that you dont have to be an admin on the vnc server pc, but I am looking for some advice on debugging this issue. Does the user have to be a "power user" or a local user at all, etc?

This issue is also occuring on every XP machine and NT machine in the office.

Please advise!

Thanks

-Yep

[mod=3406,1172021799] Moved to post to the MSlogon Topic [/mod]
Last edited by yepyep on 2007-02-21 01:36, edited 1 time in total.
Marscha
Former moderator
Former moderator
Posts: 464
Joined: 2004-05-14 06:48

Re: Local Permissions Questions

Post by Marscha »

You don't need admin rights for connecting with MSLogon I.
With MSLogon I, you just have to enter the username without any domain prepended/appended.
MSLogon I then searches if there is a local user with that name or a domain user with that name.
The domain that is searched is the one where the computer is joined to.

With MSLogon I you cannot specify user accounts in the "Configure MS Login Groups" dialog, only groups.

You can also try to use MSLogon II.
yepyep
Posts: 4
Joined: 2007-02-20 23:09

Re: Local Permissions Questions

Post by yepyep »

Thanks for the quick reply.

I placed the user into a VNCUsers group in the domain and added that group to UltraVNC server on the NT4 workstation. The user still gets an "authentication failed" error when they attempt to connect to the NT4 pc and enter their domain username and password.

I then added this user as a local user to the NT4 pc and they were still unable to connect.

I then made this user a power user and they were still unable to connect.

I then made this user an admin user and they were able to connect ok.

As for me, my login is the VNCAdmins group on the domain and that group was also added to the VNC server. I am able to use my credientals without a problem and am not explicetly defined as a local user on the NT4 pc, but I am also a domain admin and by default have admin rights on local machines.

I will test this on an XP machine later today.

-Yep
yepyep
Posts: 4
Joined: 2007-02-20 23:09

Re: Local Permissions Questions

Post by yepyep »

I am able to reproduce this issue on every Windows XP Pro machine that we have. The user can only login to VNC if they are an administrator on the machine they are trying to log into (in addition to being in an MS logon1 group). What am I doing wrong? Anyone?
Marscha
Former moderator
Former moderator
Posts: 464
Joined: 2004-05-14 06:48

Re: Local Permissions Questions

Post by Marscha »

already tried MS-Logon II?
Do you have the same behavior there?
yepyep
Posts: 4
Joined: 2007-02-20 23:09

Re: Local Permissions Questions

Post by yepyep »

MS-Logon II works :) ... wonder what the problem was.
Post Reply