Configuring and Licensing RealVNC Connect for Windows using Group Policy

Follow

If you have a subscription that includes the Group Policy feature you can configure and license RealVNC Connect using Group Policy, for Windows computers in your environment.

For macOS and Linux, please refer to the following article: Remotely Configuring and Locking Down VNC Connect Using Policy

Using Microsoft Intune?

Check out our Intune guide here: Configuring and Licensing RealVNC Connect for Windows using Intune

Installing the RealVNC Connect ADMX templates

Which template files do I need?

The ADMX templates can be download using the links below:

RealVNC Server ADMX templates

RealVNC Viewer ADMX templates

Where are the template files installed?

Once the policy template files have been downloaded you will need to extract and copy all files from the .zip folder into the relevant policy directory - this is usually C:\Windows\SYSVOL\domain\Policies\PolicyDefinitions.

Not using a Central Store for Group Policy in your domain?

Instead of the folder above, you need to copy the files to C:\Windows\PolicyDefinitions

How do I use the templates in Group Policy?

RealVNC Server and RealVNC Viewer configuration and licensing is managed using the Group Policy Management Editor, available on a Windows Server acting as a Domain Controller. The relevant policy template files for customizing RealVNC Server and RealVNC Viewer parameters can be found below.

Application Area Policy template file
RealVNC Server Computer Configuration RealVNC > VNC Server> Service Mode
RealVNC Server Licensing Computer Configuration RealVNC > Licensing
RealVNC Viewer User Configuration  RealVNC > VNC Viewer
RealVNC Viewer Licensing
(RealVNC Viewer 7.x only)
User Configuration RealVNC > VNC Viewer Licensing

The templates appear in Group Policy Management Editor as shown below.

RealVNC Server

gpo_server.png

RealVNC Viewer

gpo_viewer.png

Configuring RealVNC Connect

Please use the following table to determine which group of settings to use to configuration a particular area of RealVNC Server and RealVNC Viewer.

Program Mode Process Area Settings Group Contains parameters for...
RealVNC Server Service core CC VNC Server > Service Mode Connectivity, security, locale, performance, logging and more.
UI UC VNC Server > Service Mode > User Interface Locale, file transfer, and chat.
User core UC VNC Server > User Mode Connectivity, security, locale, performance, logging and more.
UI UC VNC Server > User Mode > User Interface Locale, file transfer, and chat.
RealVNC Viewer UC VNC Viewer Performance, picture quality, useability, locale, logging, and more.

*For RealVNC Server, locale can be set in multiple locations to configure different aspects of the display language, if required.

Note that in the Area column is defined as:

  • CC refers to Computer Configuration > Administrative Templates > RealVNC
  • UC refers to User Configuration > Administrative Templates > RealVNC

Settings will default to Not configured, meaning RealVNC Server and RealVNC Viewer will use the default value for the parameter. Settings that are set to Disabled will show as False and settings that are set to Enabled will show as True / the setting value in the respective RealVNC Server and RealVNC Viewer applications.

Licensing RealVNC Connect

RealVNC Server

To license RealVNC Server using group policy you will need your offline license from the Device Access > Deployment page of your RealVNC account.

In Group Policy Management editor, navigate to Computer Configuration -> Policies -> Administrative Templates -> RealVNC -> Licensing.

If you are licensing RealVNC Server 7.x, use the Offline license setting
If you are licensing RealVNC Server 6.x, use the Legacy 6.x License Key Code setting

Once you have selected the relevant setting, select the Enabled radio button. In the Value textbox, paste your offline license, found on the Deployment page of your RealVNC account.

For RealVNC Server 7.x, this is the long Offline license key.
For RealVNC Server 6.x, this is a 25 character license key.

*Any license keys applied directly to a particular computer will be ignored.

RealVNC Viewer (7.x and later)

RealVNC Viewer only needs to be licensed when connecting to a RealVNC Server using a per user subscription.

To license RealVNC Viewer using group policy you will need your offline license from the Deployment page of your RealVNC account.

In Group Policy Management editor, navigate to User Configuration -> Policies -> Administrative Templates -> RealVNC -> VNC Viewer Licensing.

Select the Offline license for VNC Viewer setting, select the Enabled radio button. In the Value textbox, paste your offline license found on the Deployment page of your RealVNC account. This is the long Offline license key.

Locking down mixed-subscription deployments

If some target computers have subscriptions applied that do not include policy management, you can prevent RealVNC Server running on these computers while policy is in force:

  1. Expand the Computer Configuration > Administrative Templates > RealVNC > Restrictions policy template file.
  2. Edit the Disable VNC Server if the license key does not support group policy setting.
  3. Choose Enabled.
Was this article helpful?
7 out of 16 found this helpful

Comments

0 comments

Article is closed for comments.