Is VNC safe over a LAN?

[pcthuglife]

I've read that VNC uses an un-encrypted tunnel so it is not recommended that it be used over the inter web. So how would VNC be in an office lan environment? The lan is behind a firewall, so as long as I don't open port 5950 (I think that's the default vnc port) then I should be ok right? My goal is to just administer the other pc's and servers on the lan from my desk. I work in a pretty small office, so I've never really needed anything like this before. But with the addition of a new office suite and 5 new users, a remote desktop solution like this would be helpful. Does anyone have any recommendations before I install VNC on the lan pc's?

 

[blemoine]

Ultra VNC has the encryption plugin. i would install it and make sure its not set to start automatically and not running as a service. that way the person needing tech support has to initiate the call. and no one can "spy" on anyone else. also if you are using Active Directory you can allow only certain users to be able to make a remote connection.

By the way this setup passed a FDIC exam with no problems. If it is good enough for them it should be good enough for you.

 

[pcthuglife]

cool thanks for the reply. I was looking into the enterprise edition of realvnc because that also supports encryption and its relatively cheap. I'll definitely check out ultravnc though.

 

[JackMDS]

Originally posted by: pcthuglife port 5950

5900

:sun:

 

[RebateMonger]

If you don't already have a server, SBS 2003 has built-in remote access and remote assistance modes, similar to VNC. But it's totally menu-based and users can access it, as well as administrators. SBS's Remote Web Workplace uses a strong encryption scheme that's not susceptable to Man-in-the-Middle attacks, unlike straight Remote Desktop.

As mentioned, plain VNC doesn't use content encryption at all.

 

[Nothinman]

Originally posted by: JackMDS

Originally posted by: pcthuglife port 5950

5900

:sun:

5900 is only the first instance port, it could be 5950, if he had 50 more VNC desktops on that host =)

 

[blemoine]

The port number should be irrelevant since no one from the outside will be connecting through VNC. i would advise against using it remotely.

 

[pcthuglife]

Well the plan is to just have a lan administration system. I definitely don't plan on using it remotely. I just need a way to troubleshoot someone's computer from my desk. I'd also like the user to be able to see what I'm doing which I think rules out remote desktop. Is ultraVNC free?

 

[RebateMonger]

Originally posted by: pcthuglife
I'd also like the user to be able to see what I'm doing which I think rules out remote desktop. Is ultraVNC free?

Remote Assistance, which is, basically, remote desktop, allows two simultaneous logons. I use it all the time to support clients via SBS. Remote Assistance works nicely on a LAN, or if you have an SBS Server to run it from.

VNC is fine, too. It's just a little more work to keep track of who is who, computer names, etc. Remote Assistance and Remote Desktop are pre-installed on XP and SBS gives you a list of all the client computers in the Domain. Both Remote Desktop and VNC have their pros/cons.

UltraVNC home page. It's free.

 

[JackMDS]

Originally posted by: RebateMongerVNC is fine, too. It's just a little more work to keep track of who is who, computer names, etc.

Very true.

And the solution is? http://www.vncscan.com/

You can push install with it, UltraVNC (with Windows Authentication & encryption), and other VNC flavors as well.

In general, http://www.ezlan.net/vnc.html

Hmm, I think it is time to write a page about RDT an VNC and when to use what?

:sun:

 

[jbritt1234]

If you are just looking for internal desktop sharing, what about using NetMeeting?

It's included in Windows still, just not advertised. Start>Run>Type CONF>press enter. You can even set it to automatically answer if you want on the client side.