[MSLogon, Registry] Reconfigure uvnc settings remotely

[negh_var]

ok here's the problem:

Installed uvnc on about 70 pc's. Configured them with a local p/w and also configured them to use an active directory domain group.

Now I want to change the groups listed to include another one.

I had a look in the ultravnc.ini file and no groups are listed even though I *haven't* selected the option to disable ini and use registry.

What's a quick way to update all my clients to the same settings?

I thought I could simply stop the service, copy the ini file, start the service and it'll all be fine but it aint' working.

[Bonji]

MSLogon credentials are stored in the registry regardless.

You can push registry settings to each computer (which is what I do), but you have to be careful if you set local computer accounts (like the local Administrator) because the SID is different on every computer. Domain accounts are simple to push because they will be the same for every computer.

I initially used a hybrid approach where I pushed registry settings for my domain accounts and then used the MSLogonACL.exe program to grant the local admin rights. You could also use the MSLogonACL.exe program exclusively.

I now push all permissions via the registry, but I get the local computer SID first so I can determine the appropriate local Administrator SID to add.

TLDR version: MSLogonACL.exe is the easiest way to set MSLogon permissions across multiple computers.

[negh_var]

Ok so from what I understand I still do what I'm doing and push out the ini file as that would configure uvnc to use the domain groups however if I don't have the groups SID in the registry the logins wont' work?

So I either have to push out the reg settings and ini file at the same time or visit each machine individually??

Can I ask what method you use (the actual process) to configure the clients remotely?

[sbostedor]

With VNCScan, we push out the INI files first, then update the registry remotely, then restart the service remotely so that everything takes effect. Does that help?

[negh_var]

Sounds like a good plan but we currently use both RealVNC Enterprise and UltraVNC at my company. My big push to use UVNC is the cost saved as that does what we are using RVNC Enterprise for.

If I have to include cost for VNCScan, it makes an arguement pointless, even though the cost reduced a heap.

I'll work on maybe a simple batch file that will do the change following your process and see how I go.

With VNCScan, we push out the INI files first, then update the registry remotely, then restart the service remotely so that everything takes effect. Does that help?

[B]

That's what I think Steve meant, telling you how he does it so you could mimic it. I don't think he was selling.