What causes the error message to appear?
When using RealVNC applications you may see an error message referring to a "Bad Image", as shown in the screenshot below:
This is caused by RealVNC's new RestrictedMode blocking the action.
RestrictedMode is a security feature that helps protect RealVNC applications on Windows systems.
When enabled, it ensures that only properly signed Microsoft DLLs can be loaded by the RealVNC application, significantly enhancing security.
RestrictedMode is enabled by default in RealVNC Connect 8.4.0, RealVNC Connect Viewer 8.4.0 and RealVNC Server 7.17.0 onwards.
Disabling RestrictedMode
If you need to RestrictedMode for any reason, for example for compatibility reasons with a separate application you have installed on your device:
- Open Registry Editor (regedit.exe) with administrator privileges
- Navigate to:
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\RealVNC\<appName> - Create or modify the String value RestrictedMode
- Set the value to 0 to disable
- Restart the RealVNC application
For example, to disable RestrictedMode for RealVNC Connect Viewer:
- Open Registry Editor (regedit.exe) with administrator privileges
- Navigate to:
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\RealVNC\rvncconnect - Create or modify the String value RestrictedMode
- Set the value to 0 to disable
- Restart the RealVNC application
You may need to manually create Registry Keys for RealVNC and/or your desired <appName> if they do not exist
appName values:
- vncviewer
- vncserver
- rvncconnect
- rvncserver
RestrictedMode values:
- 1 (or missing): RestrictedMode is enabled (default, recommended)
- 0: RestrictedMode is disabled (opt-out)
Recommendations
RealVNC recommend that you:
- keep RestrictedMode enabled unless you have a specific compatibility requirement
- only disable this feature if absolutely necessary and you understand the security implications
- ensure any decision to disable RestrictedMode is approved by your IT security team
Comments
Article is closed for comments.