If you have an Enterprise subscription you can deploy, configure and license VNC Connect using Group Policy for Windows computers in your environment.
For Mac and Linux, please refer to the following article: Remotely Configuring and Locking Down VNC Connect Using Policy
Installing the VNC Connect ADMX templates
Which template files do I need?
The ADMX templates can be found in the related downloads section at the bottom of the download page, or via one of the links below.
Where are the template files installed?
Once the policy template files have been downloaded you will need to extract and copy all files from the .zip folder into the relevant policy directory - this is usually C:\Windows\SYSVOL\domain\Policies\PolicyDefinitions.
Not using a Central Store for Group Policy in your domain?
Instead of the folder above, you need to copy the files to C:\Windows\PolicyDefinitions instead.
How do I use the templates in Group Policy?
VNC Server and VNC Viewer configuration and licensing is managed using the Group Policy Management Editor, available on a Windows Server acting as a Domain Controller. The relevant policy template files for customizing VNC Server and VNC Viewer parameters can be found below.
| Application | Area | Policy template file |
|---|---|---|
| VNC Server | Computer Configuration | RealVNC > VNC Server> Service Mode |
| VNC Server Licensing | Computer Configuration | RealVNC > Licensing |
| VNC Viewer | User Configuration | RealVNC > VNC Viewer |
| VNC Viewer Licensing (VNC Viewer 7.x only) |
User Configuration | RealVNC > VNC Viewer Licensing |
The templates appear in Group Policy Management Editor as shown below.
VNC Server
VNC Viewer
Configuring VNC Connect
Please use the following table to determine which group of settings to use to configuration a particular area of VNC Server and VNC Viewer.
| Program | Mode | Process | Area | Settings Group | Contains parameters for... |
|---|---|---|---|---|---|
| VNC Server | Service | core | CC | VNC Server > Service Mode | Connectivity, security, locale, performance, logging and more. |
| UI | UC | VNC Server > Service Mode > User Interface | Locale, file transfer, and chat. | ||
| User | core | UC | VNC Server > User Mode | Connectivity, security, locale, performance, logging and more. | |
| UI | UC | VNC Server > User Mode > User Interface | Locale, file transfer, and chat. | ||
| VNC Viewer | UC | VNC Viewer | Performance, picture quality, useability, locale, logging, and more. | ||
*For VNC Server, locale can be set in multiple locations to configure different aspects of the display language, if required.
Note that in the Area column is defined as:
- CC refers to Computer Configuration > Administrative Templates > RealVNC
- UC refers to User Configuration > Administrative Templates > RealVNC
Settings will default to Not configured, meaning VNC Server and VNC Viewer will use the default value for the parameter. Settings that are set to Disabled will show as False and settings that are set to Enabled will show as True / the setting value in the respective VNC Server and Viewer applications.
Licensing VNC Connect
VNC Server
To license VNC Server using group policy you will need your offline license from the Deployment page of your RealVNC account.
In Group Policy Management editor, navigate to Computer Configuration -> Policies -> Administrative Templates -> RealVNC -> Licensing.
If you are licensing VNC Server 7.x, use the Offline license setting
If you are licensing VNC Server 6.x, use the Legacy 6.x License Key Code setting
Once you have selected the relevant setting, select the Enabled radio button. In the Value textbox, paste your offline license, found on the Deployment page of your RealVNC account.
For VNC Server 7.x, this is the long Offline license key.
For VNC Server 6.x, this is a 25 character license key.
*Any license keys applied directly to a particular computer will be ignored.
VNC Viewer (7.x and later)
VNC Viewer only needs to be licensed when connecting to a VNC Server using a per user subscription.
To license VNC Viewer using group policy you will need your offline license from the Deployment page of your RealVNC account.
In Group Policy Management editor, navigate to User Configuration -> Policies -> Administrative Templates -> RealVNC -> VNC Viewer Licensing.
Select the Offline license for VNC Viewer setting, select the Enabled radio button. In the Value textbox, paste your offline license found on the Deployment page of your RealVNC account. This is the long Offline license key.
Locking down mixed-subscription deployments
If some target computers have subscriptions applied that do not include policy management, you can prevent VNC Server running on these computers while policy is in force:
- Expand the Computer Configuration > Administrative Templates > RealVNC > Restrictions policy template file.
- Edit the Disable VNC Server if the license key does not support group policy setting.
- Choose Enabled.
Comments
Please sign in to leave a comment.