sc w/ -[uac/aero] and securevnc plugin

[AndrewG]

Okay, I've spent the afternoon trying to get this to work and I have not had much luck. I made a go at trying to get all of the following working:
1) Use secureVNC
2) Kill Aero for Basic theme on Vista/7
3) Single UAC elevation on connect.

My understanding is that if I use the last option on the online creator, that it should do 2 & 3.

*sigh* any guidance would be great from any of the gurus out there.

[adzm]

Any idea regarding how the single UAC elevation (DIS_UAC) option works? Forum posts or etc?

I am currently using the official builds of uvnc for our sc distribution. All in all it comes to about a megabyte. It's a bit hefty, but not so much these days. I also have a tiny dropper app that simply checks the date if the file on a webserver and compares it to a local version -- but it is not in production yet.

Unfortunately the official uvnc builds do not support the helpdesk stuff. But you can handle most everything via the ini and commandline. We use a single repeater and the SecureVNC plugin. It has served us well for thousands of machines.

I can't quite recall how uac is specified in the manifest; so I am interested in figuring out the best way to handle uac too. I am hesitant to introduce anything that would prevent an unpriveleged user from running it, though.

I have some experiments that temporarily disable the securedesktop options, as well as other eye candy like smooth scrolling and fading, etc.

Sorry I can't be of more help, but if it sounds like my approach using the official uvnc builds would work for you, then I would have more motivation to write up a tutorial!

[AndrewG]

Argh! I started to write a reply to this a week ago...and apparently never hit submit! So, YES, I would love a tutorial!

We need a solution that allows our clients to only allow access when they want to allow it... SC has worked great for us, but the encryption currently in place is too cumbersome... resulting in dropped frames, etc.

So, YES, PLEASE! A tutorial would be fantastic!

Any tips in the tutorial on how to make sure that winvnc already running on the computer wouldn't cause a problem would also be great!

Cheers,
AndrewG

[B]

I'd like to see it too. I imagine it would be your own "take" on a roll-your-own the UVNC bundling done by SCPrompt and ChunkVNC.

Doing that with the added security of SecureVNC would be great.

I assume you've already seen and possibly incorporated ColtB45's simple CAD-with-UAC-Disabled patch?

[adzm]

Wait, what is this ColtB45's simple CAD-with-UAC-Disabled patch? Can you link me?

[B]

CAD solution with UAC off

Surprisingly simple, and works very well. He compiled versions for 1.0.8.2 and, at my request 1.0.8.0 (because of 1.0.8.2's repeater and monitor problems).

You also need to change one registry entry -- I've found the following works fine:

Code: Select all

reg add HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System /v SoftwareSASGeneration /t REG_DWORD /d 1 /f


[forumator]

I'm also having trouble getting SecureVNC to work with SCprompt, so any tips on that would be awesome.

[AndrewG]

wondering if perhaps a tutorial could be started here... and we could test it out for you ... or any other help that we could provide.