Home / server / Questions / 576249
Accepted
ETL
Asked: 2014-02-18 11:11:43 +0800 CST

Changing VNC Password Remotely - All Sorts of Versions (Windows)

  • 772

There are a few other posts (e.g. Remotely set VNC service password ) on that subject but they are narrow to one specific VNC software/version.

I have a situation whereby I have about 500 PCs on a Windows Domain and they are setup with a mix of VNC versions - RealVNC4, UltraVNC, TightVNC, and each of different versions.

So some use an ini file (like most recent version of UltraVNC), some use Registry and they use different section of the registry.

Anyone knows of a script/tool that will just try all options and set the password?

vnc

2 Answers

  1. Best Answer

    No such tool exists.

    And before you run off and try to write a script yourself to do something monumentally silly (like trying a bunch of different credentials on 500 VNC servers and reporting the results back), the only solution to this that isn't going to be ridiculously painful or involve a bunch of manual work is below.

    1. Write a script/GPO to uninstall all the VNC servers in your environment.
      • My experience with those VNC servers tells me you can check against registry keys to get the specific application and version installed, and then use that to call the (proper) uninstaller.
    2. Determine a standard VNC server deployment you desire.
      • Including the credentials you wish these servers to have, of course.
      • Depending on which VNC server you decide to push out, it may be easier to just install the server with the installer, and then copy .ini files containing the settings and credentials to all your clients (via GPP).
    3. Write a GPO to install the VNC server to all your clients.
      • Probably best to do with a computer startup script.
      • Again, use a registry key to check if it's installed before calling the installer.
    4. Update script as needed for new versions.

    This is going to be vastly better than trying to deal with multiple VNC server vendors in multiple configurations, and should even be relatively easy to manage, compared to what you have now, which I wouldn't even try to deal with. You're definitely in a situation where it's going to be vastly easier to build right from scratch than repair.

    • 1

  2. For the record, below is the script which I used to disable VNC on all computers (ran the script for all computers on the domain):

    @ECHO OFF
:: Find out what VNC services exists
for /f "tokens=1" %%f in ('psservice \\%1 ^| egrep -i "vnc|tvnserver" ^| grep "SERVICE_NAME" ^| sed "s/SERVICE_NAME: //"') do (
    echo %%f
        psservice \\%1 stop %%f
        psservice \\%1 setconfig %%f disabled
)

    That requires Sysinternals and UnixTools.

    • 0