Preventing Users Configuring VNC Connect


By default, users can configure VNC Server and VNC Viewer. 

If you have an Enterprise subscription, the recommended way to prevent change is to lock down VNC Connect programs using policy.

If you have a Home or Professional subscription, you can make VNC Connect programs harder to change; see below.

Mitigating against change

Disabling the VNC Server Options dialog

To disable the VNC Server Options dialog, specify the DisableOptions parameter:

  • Under Windows, in the HKEY_LOCAL_MACHINE\Software\RealVNC\vncserver (Service Mode) or HKEY_CURRENT_USER\Software\RealVNC\vncserver (User Mode) Registry key.
  • Under Linux, in the /root/.vnc/config.d/vncserver-x11 (Service Mode), ~/.vnc/config.d/vncserver-x11 (User Mode), or ~/.vnc/config.d/Xvnc (Virtual Mode) VNC configuration file.
  • Under Mac, in the /var/root/.vnc/config.d/vncserver (Service Mode) or ~/.vnc/config.d/vncserver (User Mode) VNC configuration file.

Note that under Linux or Mac, you can disable the Options dialog for all modes and users by specifying the DisableOptions parameter in a global location such as /etc/vnc/config.d/common.custom.

*You cannot disable the VNC Viewer Properties dialog. However, you can use policy to lock down VNC Viewer irrespective of subscription type.

Preventing users editing storage locations

VNC Connect parameters and other settings are stored in the locations listed below. Files and directories should have suitable ownership or permissions to prevent users making changes.


Registry key Notes
HKEY_CURRENT_USER\Software\RealVNC  For each user account running VNC Connect


Directory or file Notes
/etc/vnc/config  VNC Server in Virtual Mode only
/etc/vnc/config.custom  VNC Server in Virtual Mode only
~/.vnc/config.d/  For each user account running VNC Connect
~/.vnc/config  For each user account running VNC Server in Virtual Mode only


Directory Notes
~/.vnc/config.d/  For each user account running VNC Connect
Was this article helpful?
0 out of 8 found this helpful



Please sign in to leave a comment.