VNC Security issues

[tog]

Hi

I am using Ultra VNC Server and Viewer, when I push the Server to the clients I want to lock down the Properties so clients cannot make changes on there pc. As of now when I right click on Ultra VNC Server I can make any changed I want including the passswords.

Thanks for your Help

Tristan

[Bonji]

I am using Ultra VNC Server and Viewer, when I push the Server to the clients I want to lock down the Properties so clients cannot make changes on there pc. As of now when I right click on Ultra VNC Server I can make any changed I want including the passswords.

Change the "AllowProperties" property in the ultravnc.ini to a value of 0. There are lots of other settings in there that you may want to tweak as well.

I'm sure that the vnc session I'm using from work is using SSH tunneling, so I'm sure that is secure, but I was wondering if having a vncserver running will allow people to connect to it without using ssh. i.e. could they brute force my vnc username and password to obtain a connection to my computer?

Assuming the encryption is decent, SSH tunneling is secure. I would highly recommend using the DSM encryption plugin that encrypts all of uVNC's communications. With this plugin, your password cannot be brute-forced until they get through the encryption component which would require the correct key.