Update: UltraVNC 1.4.3.6 and UltraVNC SC 1.4.3.6: viewtopic.php?t=37885
Important: Please update to latest version before to create a reply, a topic or an issue: viewtopic.php?t=37864

Join us on social networks and share our announcements:
- Website: https://uvnc.com/
- GitHub: https://github.com/ultravnc
- Mastodon: https://mastodon.social/@ultravnc
- Facebook: https://www.facebook.com/ultravnc1
- X/Twitter: https://twitter.com/ultravnc1
- Reddit community: https://www.reddit.com/r/ultravnc
- OpenHub: https://openhub.net/p/ultravnc

[MSLogon, Registry] Reconfigure uvnc settings remotely

Post Reply
negh_var
Posts: 7
Joined: 2010-03-05 02:22

[MSLogon, Registry] Reconfigure uvnc settings remotely

Post by negh_var »

ok here's the problem:

Installed uvnc on about 70 pc's. Configured them with a local p/w and also configured them to use an active directory domain group.

Now I want to change the groups listed to include another one.

I had a look in the ultravnc.ini file and no groups are listed even though I *haven't* selected the option to disable ini and use registry.

What's a quick way to update all my clients to the same settings?

I thought I could simply stop the service, copy the ini file, start the service and it'll all be fine but it aint' working.
Last edited by negh_var on 2011-03-31 20:45, edited 1 time in total.
Bonji
100
100
Posts: 339
Joined: 2008-05-13 14:54

Re: Reconfigure uvnc settings remotely

Post by Bonji »

MSLogon credentials are stored in the registry regardless.

You can push registry settings to each computer (which is what I do), but you have to be careful if you set local computer accounts (like the local Administrator) because the SID is different on every computer. Domain accounts are simple to push because they will be the same for every computer.

I initially used a hybrid approach where I pushed registry settings for my domain accounts and then used the MSLogonACL.exe program to grant the local admin rights. You could also use the MSLogonACL.exe program exclusively.

I now push all permissions via the registry, but I get the local computer SID first so I can determine the appropriate local Administrator SID to add.

TLDR version: MSLogonACL.exe is the easiest way to set MSLogon permissions across multiple computers.
-Ben
negh_var
Posts: 7
Joined: 2010-03-05 02:22

Re: [MSLogon, Registry] Reconfigure uvnc settings remotely

Post by negh_var »

Ok so from what I understand I still do what I'm doing and push out the ini file as that would configure uvnc to use the domain groups however if I don't have the groups SID in the registry the logins wont' work?

So I either have to push out the reg settings and ini file at the same time or visit each machine individually??

Can I ask what method you use (the actual process) to configure the clients remotely?
sbostedor
100
100
Posts: 273
Joined: 2005-02-02 19:30
Location: Jackson, MI, USA
Contact:

Re: [MSLogon, Registry] Reconfigure uvnc settings remotely

Post by sbostedor »

With VNCScan, we push out the INI files first, then update the registry remotely, then restart the service remotely so that everything takes effect. Does that help?
Steve Bostedor
http://www.vncscan.com
Super Simple UltraVNC Management
negh_var
Posts: 7
Joined: 2010-03-05 02:22

Re: [MSLogon, Registry] Reconfigure uvnc settings remotely

Post by negh_var »

Sounds like a good plan but we currently use both RealVNC Enterprise and UltraVNC at my company. My big push to use UVNC is the cost saved as that does what we are using RVNC Enterprise for.

If I have to include cost for VNCScan, it makes an arguement pointless, even though the cost reduced a heap.

I'll work on maybe a simple batch file that will do the change following your process and see how I go.
sbostedor wrote:With VNCScan, we push out the INI files first, then update the registry remotely, then restart the service remotely so that everything takes effect. Does that help?
B
800
800
Posts: 2338
Joined: 2009-09-09 14:05

Re: [MSLogon, Registry] Reconfigure uvnc settings remotely

Post by B »

That's what I think Steve meant, telling you how he does it so you could mimic it. I don't think he was selling.
Post Reply