Preventing Users Configuring VNC Connect

Follow

By default, users can configure VNC Server and VNC Viewer. 

If you have an Enterprise subscription, the recommended way to prevent change is to lock down VNC Connect programs using policy.

If you have a Home or Professional subscription, you can make VNC Connect programs harder to change; see below.

Mitigating against change

Disabling the VNC Server Options dialog

To disable the VNC Server Options dialog, specify the DisableOptions parameter:

  • Under Windows, in the HKEY_LOCAL_MACHINE\Software\RealVNC\vncserver (Service Mode) or HKEY_CURRENT_USER\Software\RealVNC\vncserver (User Mode) Registry key.
  • Under Linux, in the /root/.vnc/config.d/vncserver-x11 (Service Mode), ~/.vnc/config.d/vncserver-x11 (User Mode), or ~/.vnc/config.d/Xvnc (Virtual Mode) VNC configuration file.
  • Under Mac, in the /var/root/.vnc/config.d/vncserver (Service Mode) or ~/.vnc/config.d/vncserver (User Mode) VNC configuration file.

Note that under Linux or Mac, you can disable the Options dialog for all modes and users by specifying the DisableOptions parameter in a global location such as /etc/vnc/config.d/common.custom.

*You cannot disable the VNC Viewer Properties dialog. However, you can use policy to lock down VNC Viewer irrespective of subscription type.

Preventing users editing storage locations

VNC Connect parameters and other settings are stored in the locations listed below. Files and directories should have suitable ownership or permissions to prevent users making changes.

Windows

Registry key Notes
HKEY_LOCAL_MACHINE\Software\RealVNC  
HKEY_CURRENT_USER\Software\RealVNC  For each user account running VNC Connect

Linux

Directory or file Notes
/etc/vnc/config.d/  
/etc/vnc/config  VNC Server in Virtual Mode only
/etc/vnc/config.custom  VNC Server in Virtual Mode only
/root/.vnc/config.d/  
~/.vnc/config.d/  For each user account running VNC Connect
~/.vnc/config  For each user account running VNC Server in Virtual Mode only

Mac

Directory Notes
/etc/vnc/config.d/  
/var/root/.vnc/config.d/  
~/.vnc/config.d/  For each user account running VNC Connect
Was this article helpful?
0 out of 8 found this helpful

Comments

0 comments

Please sign in to leave a comment.