If you have a subscription that includes the Group Policy feature you can configure and license RealVNC Connect using Group Policy, for Windows computers in your environment.
For macOS and Linux, please refer to the following article: Remotely Configuring and Locking Down VNC Connect Using Policy
Using Microsoft Intune?
Check out our Intune guide here: Configuring and Licensing RealVNC Connect for Windows using Intune
Installing the RealVNC Connect ADMX templates
Which template files do I need?
The ADMX templates can be download using the links below:
Where are the template files installed?
Once the policy template files have been downloaded you will need to extract and copy all files from the .zip folder into the relevant policy directory - this is usually C:\Windows\SYSVOL\domain\Policies\PolicyDefinitions.
Not using a Central Store for Group Policy in your domain?
Instead of the folder above, you need to copy the files to C:\Windows\PolicyDefinitions
How do I use the templates in Group Policy?
RealVNC Server and RealVNC Viewer configuration and licensing is managed using the Group Policy Management Editor, available on a Windows Server acting as a Domain Controller. The relevant policy template files for customizing RealVNC Server and RealVNC Viewer parameters can be found below.
| Application | Area | Policy template file |
|---|---|---|
| RealVNC Server | Computer Configuration | RealVNC > VNC Server> Service Mode |
| RealVNC Server Licensing | Computer Configuration | RealVNC > Licensing |
| RealVNC Viewer | User Configuration | RealVNC > VNC Viewer |
| RealVNC Viewer Licensing (RealVNC Viewer 7.x only) |
User Configuration | RealVNC > VNC Viewer Licensing |
The templates appear in Group Policy Management Editor as shown below.
RealVNC Server
RealVNC Viewer
Configuring RealVNC Connect
Please use the following table to determine which group of settings to use to configuration a particular area of RealVNC Server and RealVNC Viewer.
| Program | Mode | Process | Area | Settings Group | Contains parameters for... |
|---|---|---|---|---|---|
| RealVNC Server | Service | core | CC | VNC Server > Service Mode | Connectivity, security, locale, performance, logging and more. |
| UI | UC | VNC Server > Service Mode > User Interface | Locale, file transfer, and chat. | ||
| User | core | UC | VNC Server > User Mode | Connectivity, security, locale, performance, logging and more. | |
| UI | UC | VNC Server > User Mode > User Interface | Locale, file transfer, and chat. | ||
| RealVNC Viewer | UC | VNC Viewer | Performance, picture quality, useability, locale, logging, and more. | ||
*For RealVNC Server, locale can be set in multiple locations to configure different aspects of the display language, if required.
Note that in the Area column is defined as:
- CC refers to Computer Configuration > Administrative Templates > RealVNC
- UC refers to User Configuration > Administrative Templates > RealVNC
Settings will default to Not configured, meaning RealVNC Server and RealVNC Viewer will use the default value for the parameter. Settings that are set to Disabled will show as False and settings that are set to Enabled will show as True / the setting value in the respective RealVNC Server and RealVNC Viewer applications.
Licensing RealVNC Connect
RealVNC Server
To license RealVNC Server using group policy you will need your offline license from the Device Access > Deployment page of your RealVNC account.
In Group Policy Management editor, navigate to Computer Configuration -> Policies -> Administrative Templates -> RealVNC -> Licensing.
If you are licensing RealVNC Server 7.x, use the Offline license setting
If you are licensing RealVNC Server 6.x, use the Legacy 6.x License Key Code setting
Once you have selected the relevant setting, select the Enabled radio button. In the Value textbox, paste your offline license, found on the Deployment page of your RealVNC account.
For RealVNC Server 7.x, this is the long Offline license key.
For RealVNC Server 6.x, this is a 25 character license key.
*Any license keys applied directly to a particular computer will be ignored.
RealVNC Viewer (7.x and later)
RealVNC Viewer only needs to be licensed when connecting to a RealVNC Server using a per user subscription.
To license RealVNC Viewer using group policy you will need your offline license from the Deployment page of your RealVNC account.
In Group Policy Management editor, navigate to User Configuration -> Policies -> Administrative Templates -> RealVNC -> VNC Viewer Licensing.
Select the Offline license for VNC Viewer setting, select the Enabled radio button. In the Value textbox, paste your offline license found on the Deployment page of your RealVNC account. This is the long Offline license key.
Locking down mixed-subscription deployments
If some target computers have subscriptions applied that do not include policy management, you can prevent RealVNC Server running on these computers while policy is in force:
- Expand the Computer Configuration > Administrative Templates > RealVNC > Restrictions policy template file.
- Edit the Disable VNC Server if the license key does not support group policy setting.
- Choose Enabled.
Comments
Article is closed for comments.