By default, users can configure VNC Server and VNC Viewer.
If you have an Enterprise subscription, the recommended way to prevent change is to lock down VNC Connect programs using policy.
If you have a Home or Professional subscription, you can make VNC Connect programs harder to change; see below.
Mitigating against change
Disabling the VNC Server Options dialog
To disable the VNC Server Options dialog, specify the DisableOptions parameter:
- Under Windows, in the
HKEY_LOCAL_MACHINE\Software\RealVNC\vncserver
(Service Mode) orHKEY_CURRENT_USER\Software\RealVNC\vncserver
(User Mode) Registry key. - Under Linux, in the
/root/.vnc/config.d/vncserver-x11
(Service Mode),~/.vnc/config.d/vncserver-x11
(User Mode), or~/.vnc/config.d/Xvnc
(Virtual Mode) VNC configuration file. - Under Mac, in the
/var/root/.vnc/config.d/vncserver
(Service Mode) or~/.vnc/config.d/vncserver
(User Mode) VNC configuration file.
Note that under Linux or Mac, you can disable the Options dialog for all modes and users by specifying the DisableOptions
parameter in a global location such as /etc/vnc/config.d/common.custom
.
*You cannot disable the VNC Viewer Properties dialog. However, you can use policy to lock down VNC Viewer irrespective of subscription type.
Preventing users editing storage locations
VNC Connect parameters and other settings are stored in the locations listed below. Files and directories should have suitable ownership or permissions to prevent users making changes.
Windows
Registry key | Notes |
---|---|
HKEY_LOCAL_MACHINE\Software\RealVNC |
|
HKEY_CURRENT_USER\Software\RealVNC |
For each user account running VNC Connect |
Linux
Directory or file | Notes |
---|---|
/etc/vnc/config.d/ |
|
/etc/vnc/config |
VNC Server in Virtual Mode only |
/etc/vnc/config.custom |
VNC Server in Virtual Mode only |
/root/.vnc/config.d/ |
|
~/.vnc/config.d/ |
For each user account running VNC Connect |
~/.vnc/config |
For each user account running VNC Server in Virtual Mode only |
Mac
Directory | Notes |
---|---|
/etc/vnc/config.d/ |
|
/var/root/.vnc/config.d/ |
|
~/.vnc/config.d/ |
For each user account running VNC Connect |
Comments
Please sign in to leave a comment.