You are correct in describing the screen that I could not describe so
simply. Thanks and thanks for your response.
I understand what you are saying and you are right, AFAIK, about the
security state at that point. I just figured that if I can log off and
log back on, or vnc in at the ctrl-alt-del to login screen, then you
should be able to start at the logged out state as well with VNC set to
Query. The VPN client we use is set to kick off at this point, so that
as we do hit ctrl-alt-del, the vpn software will run, we can go through
the user name/password process, get some crazy message about company
property and what not, and then login to the 2000 box as if it were on
the remote network. I figured if this software could do it then it
wasn't impossible. And it is not the built in msft vpn client it is 3rd
party software.
Any thoughts on that? Same rules you stated apply? By the way, I saw
some other posts about the Cisco vpn client on 2000. Works great with
VNC, only problem is that the VPN client re writes the ip stack during
connection so you have to reconnect under the new ip or use the
computer's dns name(which works pretty well with the dynamic update
using dhcp for a msft product). Also good for security since VNC
traffic is now in a secure tunnel.
If I am truly stuck, after the remote client has hit the network once,
they can always sign in with the cached account info. At that point I
can connect, sign them off and then sign back on again. The whole point
is that in certain situations I need to log on as the local admin
account remotely to trouble shoot problems. If anyone has a better way,
again, any help would be appreciated. Thanks
Brian
Date: Wed, 23 May 2001 01:18:37 +0100
From: "Ian Cowley" <[EMAIL PROTECTED]>
Subject: RE: Windows 2000 fun
It sounds like you're describing the "This computer is locked, press
CTRL-ALT-DEL to unlock" screen, rather than the login screen.
As far as I know, there's no way to get the authorization box to come up
when the computer is in this state, as it's supposed to be one of the
most secure modes the computer can be in.
-
-----------------------------------------------------------------------
| Ian Cowley | [EMAIL PROTECTED] | Tel: +44(0)7979 474830 |
| Christ's College | www.iancowley.co.uk | +44(0)1223 700648 |
| Cambridge, CB2 3BU | | ICQ: 37181817 |
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]] On Behalf Of
> Lanier, Brian (CCI-San Diego CCC)
> Sent: Wednesday, May 23, 2001 12:47 AM
> To: '[EMAIL PROTECTED]'
> Subject: Windows 2000 fun
>
>
> I have been using vnc off and on over the last several years
> and have never had a problem. Now I am finding something
> interesting happening with the 3.3.3r9 running as a service
> on win2k pro. It works fine after modifying the registry
> with AuthHosts entries and a QuerySetting of 4. When I
> connect, the user gets prompted to accept or reject. If they
> accept I get the usual password box. This all works good
> until I try to connect before ctrl-alt-del is pressed. If
> the user logs on and then I connect, I can log off through
> VNC, and log on as a different user just fine. But if I
> attempt to connect before the user logs on interesting things
> happen. When the prompt should appear on the vnc server
> computer, this computer beeps like the prompt has been
> displayed, but no prompt window appears. You can move the
> press ctrl-alt-del screen around and check behind but nothing
> is displayed. After the QueryTimeout time has elapsed, I get
> the default rejection notice. It is like it is waiting on
> the desktop for the user to accept the connection, only you
> aren't there yet.
>
> If I set the timeout high enough, I can log on and the accept
> prompt is there waiting and everything is good to go. I
> searched the archives but didn't find anything that worked.
> I have QuerySetting and QueryTimeout set for both System and
> Default under the HKLM\software\orl\winvnc3 key. Is there
> anything else to that anyone has come across to fix this?
> Has anyone else seen this? If I adjust the settings to not
> query, it connects fine so I know that part works great. It
> is like vnc doesn't know where to display the accept dialog
> box or something. As I am not a programmer, I just make this
> stuff up as I go. If anyone has seen this and fixed it,
> would you be so kind as to help a lost soul out. Thanks
>
> Brian
> ---------------------------------------------------------------------
---------------------------------------------------------------------
To unsubscribe, send a message with the line: unsubscribe vnc-list
to [EMAIL PROTECTED]
See also: http://www.uk.research.att.com/vnc/intouch.html
---------------------------------------------------------------------
