Do it yourself
Life is so short…
How To Deploy TightVNC via Group Policy
What you will need…..
1. Download TightVNC MSI package (http://tightvnc.com/download.php)
2. Download and Install ORCA tool (http://www.technipages.com/download-orca-msi-editor)
Creating the Transform File….
Open the TightVNC MSI package with orca
Privacy & Cookies: This site uses cookies. By continuing to use this website, you agree to their use.
To find out more, including how to control cookies, see here: Cookie Policy Close and accept
Click Transform >> New Transform
Find (Ctrl-F) and change these values as below
1. SERVER_ADD_FIREWALL_EXCEPTION=1
2. VIEWER_ADD_FIREWALL_EXCEPTION=1
3. SERVER_ALLOW_SAS=1
4. SET_USEVNCAUTHENTICATION=1
Privacy & Cookies: This site uses cookies. By continuing to use this website, you agree to their use.
To 5. VALUE_OF_USEVNCAUTHENTICATION=1
find out more, including how to control cookies, see here: Cookie Policy
6. SET_PASSWORD=1
7. SET_USECONTROLAUTHENTICATION=1
8. VALUE_OF_USECONTROLAUTHENTICATION=1
9. SET_CONTROLPASSWORD=1
10. VALUE_OF_REMOVEWALLPAPER=0
To set passwords for connection, and so the user doesn’t turn off VNC accidentally you will need to adjust 2 values.
1. VALUE_OF_CONTROLPASSWORD
2. VALUE_OF_PASSWORD
These options are in CustomAction table, under the target field.
Inputting your password, for this tutorial im going to use PasswOrd.
Go to Transform >> Generate Transform and save as a .mst file you will need the MSI and the MST file when we deploy VNC via group policy.
Creating a share and setting the appropriate permissions.
Privacy & Cookies: This site uses cookies. By continuing to use this website, you agree to their use.
To find out more, including how to control cookies, see here: Cookie Policy
Next we need to set a shared folder across the network, one that every computer that is joined to the domain can access.
Be sure to put the MSI file and the MST file in this directory.
Finally, Creating GPO and Linking to OU’s for Software Deployment…
Now that we have our folder set up so that all computers on the domain can see it, and have access to the files inside its time to set up our GPO.
Since I have OUs set up for laptops and desktops that are on my network, I will link this GPO both OUs.
Open group policy Management, Expand the forest, expand domains, expand the domain you are wishing to push software.
Privacy & Cookies: This site uses cookies. By continuing to use this website, you agree to their use.
To find out more, including how to control cookies, see here: Cookie Policy
Right Click Group Policy Objects and click NEW.
Name your GPO, I named mine VNC Install MSI.
right click the new GPO you created and click Edit.
Privacy & Cookies: This site uses cookies. By continuing to use this website, you agree to their use.
To find out more, including how to control cookies, see here: Cookie Policy
Under Computer Configuration, expand Policies, Software Settings and right click on software installation Click New >> Package.
Browse to your folder via UNC path (do not browse via hard disk path this needs to be the network share path).
Open the MSI, and you will see another box saying Deploy Software, Click Advanced.
Privacy & Cookies: This site uses cookies. By continuing to use this website, you agree to their use.
To find out more, including how to control cookies, see here: Cookie Policy
Click ok, Go to Modifications Tab and click ADD.
Open your transform file (the .MST file) that we created earlier in Orca.
Privacy & Cookies: This site uses cookies. By continuing to use this website, you agree to their use.
To find out more, including how to control cookies, see here: Cookie Policy
You should see the network path in modifications here.
Click OK.
Close Group Policy Management Editor,
Now we need to link the group policy to the OUs that we want to deploy to.
Simply Right click the OU (laptops and desktops in my case) and Link an Existing GPO… and select your GPO.
Close Group Policy Management.
The best way to test this is to do a “gpupdate /force” in command prompt on a computer in the OU you set up to receive the software.
after the gpupdate /force it will ask you to restart the computer. When it comes back up, Tight VNC should be installed on this machine.
Note: if you are having problems pushing the MSI, then it may be helpful to consult the Event Viewer on the client machine you are testing with
This entry was posted in MS Windows, Thủ Thuật on August 21, 2015 [https://diyaz247.wordpress.com/2015/08/21/how-to-deploy-tightvnc-via-group-pol-
icy/] .
Privacy & Cookies: This site uses cookies. By continuing to use this website, you agree to their use.
To find out more, including how to control cookies, see here: Cookie Policy
6 thoughts on “How To Deploy TightVNC via Group Policy”
Jeff
September 13, 2016 at 3:30 am
You don’t happen to know what the MSI setting is to disable the system tray icon do you?
Việt Bóng Đêm Post author
September 13, 2016 at 4:33 pm
Hi jeff, not yet study.
Pls share if you can.
Jeff
September 13, 2016 at 9:04 pm
After searching extensively, there doesn’t appear to be a setting to change. I even use the control panel for TightVNC and unchecked the “Show icon ins the
notification area” option and then looked in the registry to see if there was a change there, but couldn’t find it. So at this point, I have given up.
sf
Privacy & Cookies: This site uses cookies. By continuing to use this website, you agree to their use.
November
To find out 15, 2016how
more, including at 8:46 pm
to control cookies, see here: Cookie Policy
Tray Icon
SET_RUNCONTROLINTERFACE
VALUE_OF_RUNCONTROLINTERFACE
0 – do not show service icon in the notification area
1 – show service icon in the notification area
Default value: 1
Jeff
November 16, 2016 at 9:41 pm
Ok, Thanks for figuring that one out. This will come in handy.
lambert
January 20, 2017 at 9:41 pm
Hi I have try and thank’s for tour paper, but the password is noy configured. It seem to be less than 8 caractères, i have put 11 and the value is in the but
does’nt work
I will try with 8 caractères to see if it is the reason
Privacy & Cookies: This site uses cookies. By continuing to use this website, you agree to their use.
To find out more, including how to control cookies, see here: Cookie Policy
