What does everyone use for VNC`ing into Windows 7 machines?

[SC92]

We use, you guessed it, VNC.

[scottpowers82]

We use Skeep as well for our console interface since it has some nice tie ins to Active Directory. Also, I configured our VNC MSI using VNCed (you can get it at VNCed - Dev4WebApps) Works great and has lots of options to configure. We use to use the Bozteck VNC Console, but just recently went to Skeep and I have to say, I like it more for the way we use it as it seems to start up much faster and deploys UltraVNC faster as well. Really though, I love the VNCed program as it makes the MSI for you already configured. Definitely a great find...

[Firefox]

We use Dameware Remote Control - works fine with Windows 7 and XP alike

[timbo343]

we use tightvnc along with LanView. Works very well. Just wish LanView would come back to the surface again. Was a great little program.

[gshaw]

SCCM for us

[PiqueABoo]

Windows Remote Assistance, it's built in to windows and will ask the end user for perms before connection. GPO configurable and no need to deploy or update seperately.

 

That for those reasons. Why anyone would add 3rd party software overhead is beyond me (the only reason I might use something else is for doing this between two machines that aren't in the same domain).

[burgemaster]

Surely asking for permission is a huge hassle? What if you want to grab a few computers to test something on?

 

Maybe we need to look at our windows 7 ultraVNC installs as other don't seem to have a problem!

 

Glennda - sorry for confusion

[PiqueABoo]

What if you want to grab a few computers to test something on?

 

Moi? RA is RDP with bells & whistles.. you just RDP to a few computers with your RDP-enabled test account and test something.

[burgemaster]

Can you rdp into an a users session then? Without permission? This is how we do it on our terminal server with ts manager. Can you do this with win7 too?

Thanks

[PiqueABoo]

Don't know - accessing someone's logon session anywhere without them knowing is on the other side on one of *my* personal lines, staff or student it offends my sense of ethics.

[Duke5A]

Ooohh any chance of the source for this?

 

Absolutely... Let me read up on including GPL licensing since it'll have a copy of TightVNC rolled up with it. Once I've done that I'll attach it to this thread.

[burgemaster]

On a whole, I think we are taking about support here not snooping, I doesn't matter if a user knows that we have remoted in or not there will always be a valid reason.

[glennda]

We have ours to remove desktop background when connected and also shows the VNC icon in the bottom corner to indicate a connection has been made. For some reason the background doesn't reappear again so a member of staff knows we have connected on.

[mac_shinobi]

I thought that some of the staff would make a fuss when I rolled out VNC but so far they've only praised it! I only use it when I'm on the phone to them so they know that it's me connecting. Our UltraVNC package also only allow domain admins to connect to machines also providing some extra security in case a student managed to bring a VNC viewer onto the network.

 

Have you got a brief guide / walk through on how you setup VNC whether it be through GPO or an ini file or whatever to only allow domain admins to connect and prompt the staff to allow a connection before it actually initiating the connection etc ?

 

Use LAN Desk at work ( paid for ) but although the user has to accept the connection is a pita because half the time if the user is on the phone / or away from said desk or not able to accept the connection and the connection drops out and you have to remote back on you can't because it times out after 20 seconds or so and then you can't continue to fix whatever issue(s) the user has reported. Only way to remote back on is to make sure said user is not logged on ie computer is at the logon screen in which case it allows you to remote straight on but you can't just remotely log a user off as they may have work they need saving etc.

Edited March 24, 2012 by mac_shinobi

[SYNACK]

Only way to remote back on is to make sure said user is not logged on ie computer is at the logon screen in which case it allows you to remote straight on but you can't just remotely log a user off as they may have work they need saving etc.

 

If you reset their password and they are allowed RDP you can take over their session

[mac_shinobi]

If you reset their password and they are allowed RDP you can take over their session

 

If Only, I could try this but they are all on windows 7 and I think by default at work GPO has been set to disable RDP so may be a problem and still would be if I did this as I would get an ear bashing from both the end user and management above me

[Chris_]

Have you got a brief guide / walk through on how you setup VNC whether it be through GPO or an ini file or whatever to only allow domain admins to connect and prompt the staff to allow a connection before it actually initiating the connection etc ?

 

Use LAN Desk at work ( paid for ) but although the user has to accept the connection is a pita because half the time if the user is on the phone / or away from said desk or not able to accept the connection and the connection drops out and you have to remote back on you can't because it times out after 20 seconds or so and then you can't continue to fix whatever issue(s) the user has reported. Only way to remote back on is to make sure said user is not logged on ie computer is at the logon screen in which case it allows you to remote straight on but you can't just remotely log a user off as they may have work they need saving etc.

 

I created an MSI package following this guide here: How to Deploy VNC using Group Policy | Wayne Zimmerman's Blog

[cpjitservices]

Use Skeep VNC console it's really simple & free, integrates with AD and really easy to setup the VNC on the clients and deploy.

[Firefox]

That for those reasons. Why anyone would add 3rd party software overhead is beyond me (the only reason I might use something else is for doing this between two machines that aren't in the same domain).

 

If you're going to use RA...then I would strongly advise you get the latest Microsoft Critical patches rolled out to every device. Microsoft warns of RDP attack within next 30 days ? The Register

[SYNACK]

If you're going to use RA...then I would strongly advise you get the latest Microsoft Critical patches rolled out to every device. Microsoft warns of RDP attack within next 30 days ? The Register

 

RA uses a different protocol to RDP over different ports so is probably not affected, besides those patches were out ages ago so most 'should' already have them installed. It also relies on someone inside your network running this exploit with their credentials to crash the target and that is probably unlikely and traceable.

[Jamo]

We have impero across the site (I know its not free though) which the staff use for classroom management. As an admin tool it is rather useful as well, we no longer have the issue of 'what PC are you logged on to' as we can search for the particular username in the list to view

[Duke5A]

Ooohh any chance of the source for this?

 

Here it is. It's still a bit rough and I'm sure my coding skills can greatly be improved upon, but it does function as intended on both Windows XP and Windows 7 machines. If you don't have VB .Net 2010 installed, there is a compiled version in \ZenControl\Compiled. Everything you need to run it is in that folder.

 

You need to have management, remote registry, and admin share access to the client you're trying to connect to. Windows 7 will need the remote registry service started through policy, as well as Secure Attention Sequence enabled and set to services. Without SAS enabled you will not be able to send CTRL-ALT-DEL key sequences through VNC to Windows Vista/7. Don't forget to open port 5900 on the client's firewall too if you have it running.

 

That's all I can think of. Give it a try and drop me some feedback!

ZenControl.zip

[Techiee]

UltraVNC because it's free and has a 'silent' option

[hit]

Was using tightVNC until last week but since changing to LGfL2 they have bundled CentraStage for free, which I have to say is A-MAZ-ING!

[DarrenG]

Have had success with both UltraVNC and tightVNC. Can't really fault either but to be fair they only got used a small amount