Pushing out in a Domain Environment with MSLOGON Groups

[Kevin]

How can this be pushed out in a domain environment with the MSLOGON groups intact ?

[prandal]

How can this be pushed out in a domain environment with the MSLOGON groups intact ?

I use a modified version of VNC Fastpush 6.5, using Sysinternals' psexec to remotely run mslogonacl.exe on the target PC.

[Kevin]

Could you provide more detail to how you set this up ? I actually been fighting to make fast push work for me.....

[ipsec]

I also hear you can create an MSI with some of this info in tact.. or they were troubleshooting it...

That way you could use AD to push out your MSI.

if your domain is AD...?

[Marscha]

with MS-Logon I you can just copy the relevant registry keys for the groups since it stores the names as strings.

With MS-Logon II you have to use MSLogonACL:
Set up the groups/users on one machine as you need them.
Export the ACL with MSLogonACL into a file.
Import the ACL from this file with MSLogonACL on all other machines.
See http://doc.ultravnc.net/features/authen ... mslogonacl for more details.

[prandal]

Could you provide more detail to how you set this up ? I actually been fighting to make fast push work for me.....

Not at the moment, but it was fairly trivial. When I have some time I'll hack fastpush 7.2 beta and feed back my changes to the fastpush author. No point in a howto for an unsupported version of fastpush.

[Kevin]

So you still have to manually run the autologonacl on each machine ? That would defeat the purpose of trying to push it out right ?

[Kevin]

We have 500 + systems to push out to.

[stranger73]

One of the previous post worked for me.

I added this line right before the service starts.

reg copy HKLM\Software\ORL\WinVNC3 \\%targetpc%\HKLM\software\ORL\WinVNC3 /f