Re: Remote Desktop and VPN issues -- PCTECH

Hi Dan,

I have found UltraVNC very easy to use both for remote control and 
file transfer over a very secure connection (when setup properly).

It is a free program.  You can read about  it at:
http://ultravnc.sourceforge.net/

There is a lot of different parts to it.  It can be very easy once you 
understand how it works.  To summarize everything:

For an easy setup like yours from one PC to one other PC you have 
to have one PC with the server running (This PC will be controlled) 
and the other PC with the viewer (This PC will control the other PC)
I set all PC's up with the server running all the time so I can control 
the other one any time I feel like it.  The server and viewer software 
come in the same download.  During the install you can select what 
you want.  Both is fine. During the install I always load the server as 
a service.  You don't need to install the Repeater.
After you install the software you need to re-boot the PC.  Then get 
into the setup.  The default port used is 5900.  It works fine.  If you 
like more security you can use other ports.  You must open up the 
port you use in the firewall and router of both sides to pass through 
the port you select just like RD.  If you need more info on how just 
ask.  Once you have that running you can add security.  There are a 
number of ways you can encrypt the connection.  I chose to use the 
DSM plug-in.  To use the DSM plug-in  you need to copy the file:
From: C:\Program Files\UltraVNC\plugin\msrc4plugin.dsm
To:     C:\Program Files\UltraVNC\msrc4plugin.dsm

Then right click on the icon in the system tray called WinVNC.
Choose Admin Properties.
Put a check mark by "Use" under the heading DSM Plugin.
Click Config.
Select 128 bit at the bottom.
Select Genkey.  It will ask you for some unique info to generate your 
own key.  
Click Ok.
Click the arrow in the box next to Genkey and you should see the 
plugin.  msrc4plugin.dsm
Select it.
Put a password in the password field.

Don't share this generated key with anyone.  You will need to get a 
copy of this key to the other PC.  Because I don't want anyone else 
getting into my PC's I don't email it unless I zip it up with a password 
and I use a High Encryption Zip program.  The regular password 
protected zip people can crack.  
On the other PC just copy the generated key into the program 
directory:
C:\Program Files\UltraVNC\
Then copy the plug-in into the program directory just like above and 
select it just like the other PC.

To connect with the WinVNC server running on the remote PC.  On 
the local PC click on the icon Ultr@VNC Viewer.  Put a check mark 
into Use DSM Plug-in.  Put either an IP address or a domain name 
into VNC Server box.  An example from your house would be:
YourWorkDomain.com

They should connect without a problem every time without fail.  

If you have any problems just ask.

If you aren't concerned about security from your house you can add 
some command line options to the icon Ultr@VNC Viewer.  In the 
command line I like to have it automatically use the DSM plug-in, 
include my password and use the lower video resolution for faster 
response times.  To do that I have:
"C:\Program Files\UltraVNC\vncviewer.exe" /8bit /password (enter 
one space and your password) /dsmplugin "MSRC4plugin.DSM"

Of course you can include what ever you like to be comfortable.  
There is one space before each /.


Things you don't need to worry about now but may be nice to know 
for the future.  I have more than one PC setup at some locations.  
There are two ways to make that work.  You can install the repeater 
that is included in the package or you can use the method I use.  I 
set each PC with a static IP address.  In the router I forward a 
different port to each different PC.  Example on the server side:
PC 1 = port 5900 with IP address 1
PC 2 = port 5901 with IP address 2
PC 3 = port 5902 with IP address 3
In your router its easy to forward each port to a different IP address.
On the viewer side when you want to connect to PC 1 the address 
could be:  
www.YourWorkDomain.com
or
YourWorkDomain.com     If that works
or
YourWorkDomain.com:5900      
For PC 2 the address could be:
YourWorkDomain.com:5901

If something isn't clear let me know.  There is a lot of information 
about UltraVNC in Google.  There is also a forum available.  

Gary Kuznitz

On 9 Sep 2005 at 12:06, Dan (Dan <pctech@xxxxxxxxxxxx>) commented about Re: 
[PCTECH] Remote Desktop and VPN issues:

> Moved the following private email to the list w/ Gary's permission in post:
> 
> On 9/9/05, Gary Kuznitz <docfxit@xxxxxxxxxxxx> wrote:
> > 
> > Hi Dan,
> > 
> > I know you want to get VPN running with RD. I have VPN running
> > and I am frequently having problems with it. I have found a better
> > solution with using the free UltraVNC. If you are not interested
> > please delete this and pay no attention. I'm sorry for sending
> > something unsolicited. If you would like to try it out let me know and
> > I'll help you get it installed with excellent security. The default way it
> > gets installed is no security. It comes with a number of ways to encrypt the
> > transmission. I am using a private key just like VPN can be configured. It
> > lets me control remote machines any where and it's much easier to install 
> > than
> > VPN and nicer to use than RD. If you are interested let me know and I'll 
> > help
> > you get it installed. If you like you can email me privately or take this 
> > back
> > to the list. I don't care. I think everyone should know about this great
> > program. I hope you don't get mad I emailed you privately.
> > 
> > Gary Kuznitz
> > 
> > PS: I am just a happy user. I don't write the program or know the
> > owners of it.
> 
> 
> Gary, I certainly took no offense at the private email, and am not sure why
> anyone would find this possibly offensive, so I took the liberty of replying 
> to
> this in the PCtech thread. 
> 
> I think it would be great to investigate alternatives to the Microsoft 
> solution, especially if they solve the issues I'm dealing with. Please send
> details.
> 
> - Dan
> -- 
> This is the PC Technical Discussion for iSeries Users (PcTech) mailing list To
> post a message email: PcTech@xxxxxxxxxxxx To subscribe, unsubscribe, or change
> list options, visit: http://lists.midrange.com/mailman/listinfo/pctech or 
> email:
> PcTech-request@xxxxxxxxxxxx Before posting, please take a moment to review the
> archives at http://archive.midrange.com/pctech.