1. RealVNC Help Center
  2. RealVNC Connect
  3. Configuration

Preventing Users Configuring RealVNC Connect

Follow
Avatar
Tegan
Updated

By default, users can configure RealVNC Server (local administrator permissions are required) and RealVNC Viewer. 

If you have a subscription which includes Group Policy, the recommended way to prevent change is to lock down RealVNC Connect programs using policy. 

If your subscription does not include Group Policy, you can make RealVNC Connect programs harder to change; see below.

Mitigating against change

Disabling the RealVNC Server Options dialog

To disable the RealVNC Server Options dialog, specify the DisableOptions parameter to have a value of 1:

  • Under Windows, in the Registry:
    • HKEY_LOCAL_MACHINE\Software\RealVNC\vncserver (Service Mode)
    • HKEY_CURRENT_USER\Software\RealVNC\vncserver (User Mode)
  • Under Linux, in a configuration file:
    • /root/.vnc/config.d/vncserver-x11 (Service Mode)
    • ~/.vnc/config.d/vncserver-x11 (User Mode)
    • ~/.vnc/config.d/Xvnc (Virtual Mode)
  • Under macOS, in a configuration file:
    • /var/root/.vnc/config.d/vncserver (Service Mode)
    • ~/.vnc/config.d/vncserver (User Mode)

Note that under Linux or macOS, you can disable the Options dialog for all modes and users by specifying the DisableOptions parameter in a global location such as /etc/vnc/config.d/common.custom.

You cannot disable the RealVNC Viewer Properties dialog. However, you can use policy to lock down RealVNC Viewer irrespective of subscription type.

Preventing users editing storage locations

RealVNC Connect parameters and other settings are stored in the locations listed below. Files and directories should have suitable ownership or permissions to prevent users making changes.

Windows

Registry key Notes
HKEY_LOCAL_MACHINE\Software\RealVNC  
HKEY_CURRENT_USER\Software\RealVNC For each user account running RealVNC Connect

Linux

Directory or file Notes
/etc/vnc/config.d/  
/etc/vnc/config RealVNC Server in Virtual Mode only
/etc/vnc/config.custom RealVNC Server in Virtual Mode only
/root/.vnc/config.d/  
~/.vnc/config.d/ For each user account running RealVNC Connect
~/.vnc/config For each user account running RealVNC Server in Virtual Mode only

macOS

Directory Notes
/etc/vnc/config.d/  
/var/root/.vnc/config.d/  
~/.vnc/config.d/ For each user account running RealVNC Connect
Was this article helpful?
0 out of 11 found this helpful

Comments

0 comments

Article is closed for comments.