|
| |||||
| Home | Reviews | Tools | Forums | FAQs | Find Service | ISP News | Maps | About |
how-to block ads |
1. General Information
2. Software Options
3. Software Setup4. Firewall Setup
5. Testing
1. General Information
1. General Information FAQ Updates What is this FAQ? Can anyone contribute? System Requirements? What are the benefits? Where did VNC come from?2. Software Options What are the basic software combinations? Behind firewall with no port forwarding Other Software: Radmin Other Software: AdminMagic23. Software Setup Setup OpenSSH Setup Cygwin Setup VNC Server Setup Windows Remote Desktop Setup SSL-Explorer4. Firewall Setup Setup Router Setup Windows XP Firewall Can I change the default port 3389 used for Windows XP Remote Desktop?5. Testing Connecting using putty with VNC Connecting using putty with Windows Remote Desktop Connecting using Windows Remote Desktop Directly Connecting using VNC directly
by dpierce I would also like to take this time to mention other sites that I used to combine all of this information together and sites that offer additional information on this subject: »www.maths.utas.edu.au/People/Hil···vnc.html »pigtail.net/LRP/printsrv/cygwin-sshd.html »pigtail.net/LRP/vnc/ »theillustratednetwork.mvps.org/R···nd_Users
by dpierce Answer: YES! All of these programs use very very little amounts of processor power and memory. As long as you have a broadband connection you should have no problem running the apps mentioned in this FAQ. by dpierce by dpierce by dpierce 2. Software Options
by dpierce LogMeIn Webex GotoMyPc These site will have the host computer connect to their servers through the internet. The remote user then logins into the website and is able to communicate to the host computer. Some of the services are free and some you have to pay for. I have never used any of the services, but others I have talked to say they work just fine.
by dpierce
You can log on as administrator on safe mode. Press F8 when you start the computer and choose Safe Mode to get in. If you can not log in safe mode, try the tool bellow, it is the best method without lose anything.
In consideration of remaining all programs and data of the computer, I recommend you to use a password tool: Windows Password Recovery Tool 3.0. It supports all versions of Windows operation system. Recover Windows password without lose anything. Here are the simple guide:
Step 1: Download Windows Password Recovery Tool 3.0 and install it in any available computer
Step 2: Burn a bootable CD/DVD or USB flash drive
Step 3: BIOS settings of your locked computer to make it boot from CD/DVD or USB flash drive
Step 4: Reset Windows password successfully
by dpierce
by dpierce 3. Software Setup
Now we have installed OpenSSH, perhaps could you show a connection between linux and windows. 2009-03-03 08:33:21 I followed the instructions and the readme and tried to change the path the client logs into to other than C:\Program Files\OpenSSH, but I fail to do so.
I get error 1067 or get the same login path. 2010-01-31 09:39:19 This does not say how to create the domain users. When i use the -d switch, i get access denied when trying to connect. 2012-02-03 16:59:54 by dpierce How to install a cygwin (ssh server) on a Windows 2000, WindowsXP, or Windows Server 2003. The ssh server is an emulation of the UNIX environment and OpenSSH toWindows, by Redhat, called Cygwin. (1) Login as a user with Administrator privilege. (2) Download cygwin's setup.exe from http://www.cygwin.com/. Once completly downloaded run the setup.exe file. There will be some basic installation information to begin. You will be selecting a server where it will download the selected files from. Select one of the locations and press next, continue till you get to the screen below. When a selection screen comes up, click the little View button for "Full" view Find the line "cygrunsrv",click on the word "skip" so that an Click (3) Right click My Computer,Properties, Advanced, Environment Variables (4) Right click My Computer, Properties, Advanced,Environment Variables (5) Open a cygwin window (by double clicking the (6) While you are still in the (black) cygwin screen, startthe sshd service: To stop the sshd service, pop open a
by dpierce ![]() You want to select the "Register Ultr@VNC Server as a system service" and the "Start or restart Ultr@VNC service." The options for icon locations is entirely up to you. Press the "Next >" button and finish up with the install. After the installation finished. Right click on the Ultr@VNC icon in the tray and select properties. If the icon isn't there than go to your Start Menu -> Programs -> UltraVNC -> Ultr@VNC Server -> Run Service Helper. ![]() When the properties window comes up you want to do the following: •Check the Accept Socket Connections and put a password in the textbox (VERY IMPORTANT!!) •Select the "AUTO" radio button so that the server will pick the 5900 port. •Check the "Allow Loopback Connections" checkbox. •Check the "Remove Desktop Wallpaper" checkbox. Press Apply and then OK. Try to connect to the server. If actually on the server when trying to connect, the screen will go into a loop and and keep displaying the same thing over and over again like two mirros looking at each other. If everything works this step is complete. ![]()
by dpierce You must first enable the Remote Desktop feature on your office computer so that you can control it remotely from another computer. You must be logged on as an administrator or a member of the Administrators group to enable Remote Desktop on your Windows XP Professional-based computer. 1. Open the System folder in Control Panel. Click Start, point to Settings, click Control Panel, and then double-click the System icon. 2. On the Remote tab, select the Allow users to connect remotely to this computer check box, as shown below. 3. Ensure that you have the proper permissions to connect to your computer remotely, and click OK. Enable Remote Desktop ![]() Setting Encryption Levels (from Microsoft.com) Data encryption can protect your data by encrypting it on the communications link between the client and the Windows XP Professional–based computer. Encryption protects against the risk of unauthorized interception of transmitted data. By default, Remote Desktop sessions are encrypted at the highest level of security available (128-bit). However, some older versions of Terminal Services client software do not support this high level of encryption. If your network contains such "legacy" clients, you can set the encryption level of the connection to send and receive data at the highest encryption level supported by the client. There are two levels of encryption available. High. The High level encrypts data sent from client to remote computer and from remote computer to client, by using strong 128-bit encryption. Use this level only if you are sure that your client computer supports 128-bit encryption (for example, if it is running Windows XP Professional). Clients that do not support this level of encryption will not be able to connect. Client Compatible. The Client Compatible level encrypts data sent between the client and the remote computer at the maximum key strength supported by the client. Use this level if your client computer does not support 128-bit encryption. You can set the encryption level of the connection between the client and the remote computer by enabling the Set client connection encryption level Properties Terminal Services Group Policy setting. To edit this encryption setting in the Group Policy 1) Goto the Start Menu and click run. In the dialog type gpedit.msc and then press ok. ![]() 2) In the Group Policy window, on the left side, goto Computer Configuration -> Administrative Templates -> Windows Components -> Terminal Services -> Encryption and Security and then on the right hand side click on Set client connection encryption level. ![]() 3) When the dialog comes up. Click enable and select the type of encryption you want. And then press enter and exit out of the Group Policy. ![]()
by dpierce Setup SSL-Explorer - Please bear with as I am going to take more screenshots of some things I have used this portal system for and will need to add more text.SSL-Explorer is a very nice little tool that I notice being talked about recently in the Networking forum and decided I would take a look at it. I liked it so much I added the install info to this FAQ for everyone to read. To get started if you want more information click here. And off we are .... cheesy theme music start now ... ok enough of that. To start download the latest version of SSL-Explorer from here. I used version 0.1.12 for the screenshots. The install is a pretty basic install uptill it finishes copying files so we will go through this really quickly. And I will try to go into more detail in the later steps. Basically the install will start out checking your java on your machine. The program has a required version of 1.5.0 of the Java Runtime and if you don't have it on your computer it will download it for you with your permission. I pressed the download and it was away. I forced the setup closed to see what would happen. The third screenshot is the result of terminating the install during the middle of the java download/install. I think its self explanatory. ![]() ![]() ![]() Moving on we are going through the standard install screenshots. Its all the basics. This is an open source program so you need to agree to the terms of the GNU. Then select destination directory and what you wanted to install. I just installed the Program I DIDN'T install the Source. Its up to you. Then it starts the fun file copying and registering services and fun stuff like that. ![]() ![]() ![]() ![]() ![]() This next screenshot starts the actual initial setup of everything. You just need to click on launch server and it will start the service in setup mode and launch a web browser going to the default location. To login the default username password are the same (admin). ![]() ![]() This is the first screen that will come up after it launches the webserver and browser. It is where you need to setup you password for you key. Basically SSL-Explorer runs a secure encrypted web server and uses java for VPN. You need to create a key and certificate for the https protocol. You type your password in (twice) and then click on set and select create new key store and click update and then click on the create button. ![]() This page will then be displayed. You can put anything in the alias spot its for your reference. in the hostname make sure you put the specific hostname you will use to access the page externally. Either IP address or Domain name. (note www.yourdomain.com is different from yourdomain.com) If they are not the same you will get a message when you connect saying that the certificate is setup for site www.yourdomain.com and you are accessing it from yourdomain.com. Certificate aren't set in stone you can always edit later if you want. Organizational Unit and Company are your creative message again. Then click on generate. The other two boxes are used for actually buying all out real certificates that are certified and owned. If you want to go through that extra expense go right ahead. I didn't so I won't be able to give you any info on that process. The process though seems pretty straight forward. ![]() This is just the screenshot when I remembered the install was still open. It hides under the web browser when you launch the server. Just click Finish. ![]() If you click on the Admin at the top of the screen you will get a drop down menu and then with sub menus. The following screenshots are from those menus and I will add text for each screenshot when I get a chance. ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Once you go through all the settings and change what you want and do what you want and cry if you want because its your party. You want to go back to the Admin menu and select Shutdown server. After confirming shutdown wait about 15 seconds and go in the services dialog. You can get there by going Start->Run->services.msc and pressing ok. Fin the SSL-Explorer and start the server. I did find sometime it takes two times if you try to start it too soon after shutting it down from setup mode. Then just browse to the »www.yourdomain.com and put in your username and password that you setup and start exploring. ![]() ![]()
by dpierce 4. Firewall Setup
1. If you are using DHCP from your router then you are going to want to create a reserved IP address that is mapped to the MAC address of the nic card in the machine that is going to be remotely accessed. 2. Once that is completed then you are going to need to setup port forwarding to that reserved IP address. Forward port 22 for ssh tunnelling Forward port 5900 for direct connection to a vnc server Forward port 3389 for direct connection to remote desktop Step-By-Step Instructions on setting up Port Forwarding on many different routers.
by dpierce To open Windows Firewall 1. Click Start and then click Control Panel. 2. In the control panel, click Windows Security Center. 3. Click Windows Firewall. Once open 1. Make sure that the "Don't allow exceptions" is NOT checked and then click on the Exceptions tab ![]() 2a. On the exceptions screen if you want to allow remote desktop click on the remote desktop checkbox and press ok. 2b. If you are going to be connecting through the secure ssh connection to remote desktop or the vnc server then you want to click on the "Add Port" button and put in port 22. 2c. If you are going to be connecting directly to the vnc server without the ssh tunneling then you need to select "Add Port" button and put in port 5900. ![]() ![]()
by dpierce Some ISP's or firewalls may block the default port 3389, and changing the port may be a successful workaround. Basic Summary Below: Run regedit ![]() Go to HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\TerminalServer\WinStations\RDP-Tcp\PortNumber ![]() Modify the decimal value of the portnumber and reboot the computer. ![]() When connecting to this computer with a different port number you will need to manually specify the port. If you are going through a SSL tunnel instead of localhost:3389 you would use localhost:portnumber. If connecting using Remote Desktop directly you would connect as yourhomeip:portnumber. (»support.microsoft.com/kb/304304/)
by MacGyver 5. Testing
Using VNC through a Putty SSH tunnelStep1.:Get the latest version of putty (0.59b works). Step 2.: Get the Ultra VNC viewer from here http://ultravnc.sourceforge.net/. Step 3.: Run putty and setup an SSH connection and tunnel to the VNC server. In this example we have setup an ssh connection to YOUR_IP_ADDRESS_HERE and given it the session name BBR . Finally set up a tunnel from port 5900 to your computer to port 5900 on the VNC server. (as shown below) Now you must save the session otherwise you'll need to do it all again next time you make a connection. Open the session and make a connection to the SSH server. Step 4.: Run the Ultra VNC viewer and make a connection to localhost:5900. You should have a login prompt from the VNC server machine now. | |||||||||||||||||||||||||||||||||||||||||||||||||||