How To Guide: Deploy VNC via Group Policy

[morganw]

You can do all of this without registry fragments now, just set MSI properties to set passwords, hide icons etc.

www.tightvnc.com/doc/win/TightVNC-installer-2.5.2.pdf

[TechMonkey]

Damnit beat me to it. But it does work perfectly as I have just done it.

[noddy2121]

hi all, this is a great solution but will it work for an environment with windows 7 32 bit and windows 7 64 bit? Is there some WMI filtering required or will the above simply work as it is?

 

Thanks

[dannydr]

hi all, this is a great solution but will it work for an environment with windows 7 32 bit and windows 7 64 bit? Is there some WMI filtering required or will the above simply work as it is?

 

Thanks

 

my solution is intended for mixed (32\64) environment. works great.

[noddy2121]

my solution is intended for mixed (32\64) environment. works great.

 

ok thanks, what is the location of the reg key I need to export? for both 32 and 64 bit versions.

 

thanks

[dannydr]

32- HKEY_LOCAL_MACHINE\SOFTWARE\TightVNC

64- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\TightVNC

 

hope this helps,

Danny.

[noddy2121]

32- HKEY_LOCAL_MACHINE\SOFTWARE\TightVNC

64- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\TightVNC

 

hope this helps,

Danny.

 

ok thank you, iv had a real issue with the deployment - I was getting an error on all machines I deployed tightvnc to saying there is an error on the server or words to that affect, but it took me ages to get vnc removed from all the machines - so I am back to square 1 ready to try again but im worried il mess u again.

 

so do I simply export the above to keys and place them in the same share on the server as the tightvnc setup files and the batch file the copies the setup file and the reg file?

[dannydr]

yep, that did the trick for me.

4 files total in the network share- setup (exe format) + 2 reg files (32+64) and the batch (script) file.

Good luck.

[noddy2121]

found the problem, i exported 32bit OS reg file that worked only with 32bit OS's because the tightVNC reg is in a different location in 32\64 OS's.

so i exported a 64bit ver as well and got 2 vers of the reg file.

then just added another IF in original script. script included:

 

if exist "C:\Program Files (x86)\TightVNC" goto :eof ELSE

if exist "C:\Program Files\TightVNC" goto :eof ELSE

"\\beta\TVNC\tightvnc-2.0.2-setup.exe" /S

 

if exist "C:\Program Files (x86)\" goto :X64 ELSE

regedit /S "\\beta\TVNC\32bit.reg

goto :finish

 

:X64

 

regedit /S "\\beta\TVNC\64bit.reg"

goto :finish

 

:finish

net stop "TightVNC Server"

net start "TightVNC Server"

rmdir /s /q "C:\Documents and Settings\All Users\Start Menu\Programs\TightVNC\"

 

I can see the last line of this script is for windows xp, does this mean the script is for windows xp or for windows 7?

[enjay]

I can see the last line of this script is for windows xp, does this mean the script is for windows xp or for windows 7?

 

If you're using redirected Start Menus, it doesn't matter. All that line does is hide the icon from the Start Menu so users can't run VNC.

[noddy2121]

we don't user redirected start menus, iv also had issues with rmdir working in a startup script so i am not sure if i should use it or not

[dannydr]

we don't user redirected start menus, iv also had issues with rmdir working in a startup script so i am not sure if i should use it or not

 

so delete the last line it's not related to VNC functionality.

[noddy2121]

i have also noticed the installer i have is version 2.0.4 rather than 2.0.2 will this make any difference e.g. the registry locations?

[dannydr]

i have also noticed the installer i have is version 2.0.4 rather than 2.0.2 will this make any difference e.g. the registry locations?

 

i'm not sure, do it with 2.0.2 to be sure.

[noddy2121]

i'm not sure, do it with 2.0.2 to be sure.

 

is it available from tight vnc website or is it some where else as i cannot find it (version 2.0.2)

[noddy2121]

iv found it . . im just going through the setup of vnc on a client and i was wondering if i need to add it as a service?

[noddy2121]

im just wondering how to install only the server on the client? i notice only /S is passed to the installer and by default the installer will install both the viewer and the server, so how do install only the server on the clients?? Is there a way to do this?

[dannydr]

im just wondering how to install only the server on the client? i notice only /S is passed to the installer and by default the installer will install both the viewer and the server, so how do install only the server on the clients?? Is there a way to do this?

 

i think the reg is disabling the viewer.

[noddy2121]

oh i see so the viewer is still installed but just not visible to the client as it has been disabled during setup therefore the changes are written to the reg?

[enjay]

im just wondering how to install only the server on the client?

I leave the Viewer on all clients, as I find it useful sometimes.

[noddy2121]

i see what you mean but there is no reason for my users to be able to use the viewer. The viewer will / should be used by the office manager only

[enjay]

i see what you mean but there is no reason for my users to be able to use the viewer. The viewer will / should be used by the office manager only

 

Correct, but leaving the viewer executable on all workstations would allow the office manager to work from other computers, should they so desire. I use VNC as a support tool as well, so find it helpful to have it more widely available than just my office.

 

I trust you've told your staff that the office manager can view their screens, by the way...

[noddy2121]

i don't think so no why? should they be aware?

[enjay]

i don't think so no why? should they be aware?

 

Yes. If you are monitoring activity then I would suggest you inform people that you are doing so. If you find yourself in the unfortunate position of wanting to take disciplinary action against someone based on what the office manager saw them doing, you wouldn't be able to do so if they hadn't been notified beforehand that someone might be watching. Same goes for your Internet filtering logs of course.

[HotSauce]

Hi guys! I know this thread is too old but I really need need your help.

I want to know if the last line of the code is applicable to Windows 7 because the folder Documents and Settings only exist in Windows XP.

How about in Windows 7? Should I need to edit it or it will work also on Windows 7?