UltraVNC

Hi,

I'm jumping in the thread because I once find out that if the computer you want to take control to has been "secured" by removing everyone and administrators from the "Access this computer from the network" user right (see in gpedit.msc), then MSLogon II will fail but MSLogon I will succeed ...

Ok I found what was wrong ! The PDC Emulator of the AD domain was in a kind of coma. After reviving it authentications to UltraVNC work again.
So old mslogon relies on PDC Emulator whereas new mslogon doesn't. Wish I could use the new one, it's soooo much faster !!!

Thanks again Marscha and sorry ...

Thank you for your quick answer.
I've got a problem with the new mslogon, it doesn't work on some hardened computers where I remove everyone from the "Access this computer from the network" right.
I just did the test and the new mslogon works where the old one doesn't.
With old mslogon, on a W2K ...

Hi Marscha,

Starting today, UltraVNC on all my computers in the Active Directory domain won't accept to authenticate domain accounts which are also local administrators of these computers. The same domain accounts are still indeed administrators of the computers because I can list the contents of ...

Thank you for your answer !

By the way, it works perfectly in MSLogon II, checking only View in the group ACL permits only a viewing of the remote computer (good work Martin).

Marc

Hi,

Leaving aside the cool MS Logon II and testing the "old" MSLogon.
What is the meaning of the Group 3 = Read Only ?
I was expecting that if I put someone in this domain Group, when connected to the vnc server he'll have view only right (no click, no keyboard) but it's not what I'm observing.
It ...

Martin,

Thanks for shedding light on this issue. I guess I'll have to revert to this workaround if I want to use the greatness of MSLogon II !
Nice job anyway.

Take care,

Marc

Hi Marscha,

I've got a problem that's causing me a few headaches even if I'm able to find a workaround I'd like to have a technical explanation from you.
In my company we have a rule that enforces heavy securing for laptops. One of this security parameter is to remove any access from the network to ...

Just did the test, it works !

Connected to UltraVNC with a forest root domain account with the user@rootdom syntax. This user is in a global group in the root domain, I put this global group in a local VNCACCESS group on my workstation which is in a different AD domain from this user.

The OS on ...

Thanks Marscha, it works now.

Best regards,

Marc

Marscha,

Quickly some feedback on what I tested:
login with user@dom : ok
login with dom\user : ok
login with user in local workstation group : ok
login with user in domain group nested in a local workstation group ok
Didn't have a chance to test cross domain authentication but I'll do it.

Regards ...

Hi Marscha,

First of all I'd like to congratulate you for putting up this new authentication method for UltraVNC as it is overall more clean and faster than the old method.

So far I found one minor bug in the ACL importation procedure. I can export the ACL with the MSLogonACL.exe /e command and ...