Update: UltraVNC 1.4.3.6 and UltraVNC SC 1.4.3.6: viewtopic.php?t=37885
Important: Please update to latest version before to create a reply, a topic or an issue: viewtopic.php?t=37864

Join us on social networks and share our announcements:
- Website: https://uvnc.com/
- GitHub: https://github.com/ultravnc
- Mastodon: https://mastodon.social/@ultravnc
- Facebook: https://www.facebook.com/ultravnc1
- X/Twitter: https://twitter.com/ultravnc1
- Reddit community: https://www.reddit.com/r/ultravnc
- OpenHub: https://openhub.net/p/ultravnc

Problem MslogonII push install

Should you have problems with the MS logon plugin, here's the place to look for help or report issues
Post Reply
code39
Posts: 2
Joined: 2012-10-31 13:57

Problem MslogonII push install

Post by code39 »

Hello,

I created batch to push intall UVNC server using .ini file with basic configuration.
I push on WiXP pro machine and no problem for installing but only 20% of machine accepted my account, 80% refused.
And when I look seetings of MSlogon, UVNC don't copy for these 80% domain account I have selected, but why ??
Do you have idea ?

Image

Thanks in advance for your support ! :)
Bonji
100
100
Posts: 339
Joined: 2008-05-13 14:54

Re: Problem MslogonII push install

Post by Bonji »

The MSLogon groups/users are stored in the registry and not the ini file. When you push UltraVNC with MSLogon config, you also need to figure out how you want to push this registry setting.

Win32: HKLM\Software\ORL\WinVNC3\ACL
Win64: HKLM\Software\Wow6432Node\ORL\WinVNC3\ACL

It's very easy if you only include domain accounts as they will be the same across all computers on the same domain. You can just push the same registry settings to all computers (via a script, program, or just importing a .reg file).

It gets more complicated if you want to include local accounts such as the local Administrator. Since the ACL value uses the SID of each account I determine the SID of the local computer's Administrator account and then dynamically build the ACL BINARY value to include it plus all the domain accounts I want. My method is pretty convoluted, but it works very well without depending on additional programs. You can also use the program that comes with UltraVNC to modify MSLogon settings (mslogonacl.exe), and while simpler I found it to be more realible to just have my own program determine the ACL value and push it directly.
-Ben
Post Reply