PC-Duo Host Guide Release 11.6 June 2010 Vector Networks Technologies 541 Tenth Street, Unit 123 Atlanta, Georgia 30318 (800) 330-5035 http://www.vector-networks.com © Copyright 2010 Vector Networks Technologies and Proxy Networks, Inc. Certain portions under copyright by Funk Software, a division of Juniper Networks, Inc. All rights reserved. PC-Duo is a trademark of Vector Networks Technologies, and PROXY is a trademark of Proxy Networks, Inc.
Table of Contents PC-Duo overview .......................................................................................................................................... 7 What‟s New with PC-Duo 11.6 .................................................................................................................. 8 PC-Duo solutions..................................................................................................................................... 10 PC-Duo Express ........................
PC-Duo Host Guide Installation requirements ...................................................................................................................... 35 Network requirements .......................................................................................................................... 35 Installation notes...................................................................................................................................... 36 Install via msiexec command line utility .
PC-Duo overview Move Up ............................................................................................................................................... 81 Move Down .......................................................................................................................................... 81 Details .................................................................................................................................................. 81 Resend Status ................
PC-Duo Host Guide Lock-down settings ................................................................................................................................ 145 Lock Host settings.............................................................................................................................. 145 Unlock Host settings ..........................................................................................................................
PC-Duo overview PC-Duo overview Thank you for selecting PC-Duo™ remote desktop solutions. PC-Duo remote desktop solutions provide professional features that enable helpdesk technicians, network administrators, IT managers, and software trainers to deliver professional remote support for a fraction of the cost of hosted solutions. Some selected features include: Remote Access: Reach anyone, anywhere, anytime using firewall- and NAT-friendly remote control connections.
PC-Duo Host Guide What’s New with PC-Duo 11.6 PC-Duo 11.6 introduces the following new features and capabilities: Terminal Services Host configuration: The Root Host can be configured to restrict the injection of a Host image to Terminal Services sessions that meet predetermined criteria (previously, the Root Host injected a Host image into every TS session).
PC-Duo overview Bandwidth throttling: PC-Duo 11.2 allows screen capture settings to be modified in order to reduce the amount of bandwidth used. Usually, this will reduce screen capture quality but improve responsiveness and overall performance (see PC-Duo Host Guide for more information). Popup notifications: PC-Duo 11.2 supports popup "toast" notifications when connections are established to remote computers (see PC-Duo Host Guide for more information). Send keystroke button: PC-Duo 11.
PC-Duo Host Guide PC-Duo solutions Vector Networks provides two solutions for remote desktop support: PC-Duo Express PC-Duo Express is an easy-to-use remote desktop solution that uses simple peer-to-peer connections between helpdesk technicians and end-user remote computers. It is ideally suited for smaller companies and workgroups in which the number of remote computers being supported is small and manageable.
PC-Duo overview PC-Duo applications The PC-Duo remote desktop solutions include some or all of the following applications: PC-Duo Applications PC-Duo Express PC-Duo Enterprise PC-Duo Host Yes Yes PC-Duo Master Yes Yes PC-Duo Gateway No Yes PC-Duo Deployment Tool Yes Yes PC-Duo Host PC-Duo Host is an agent application that enables remote support connections to be established to the machine on which it runs.
PC-Duo Host Guide PC-Duo Master is a console application that technicians can use to establish remote support connections to one or more Host computers. With PC-Duo Master, you can: Make one or more peer-to-peer remote support connections to Host computers in your network. Connect to PC-Duo Gateway and make one or more Gateway-managed remote support connections to Host computers from a directory of available Hosts. View the entire screen of the remote computer.
PC-Duo overview Record screen activity on one or more remote computers simultaneously using PC- Duo Gateway‟s screen recording feature. PC-Duo Gateway includes the PC-Duo Gateway Administrator, a tool for configuring the Gateway and for monitoring, managing and auditing remote support activity in your network. For more information about configuring and operating PC-Duo Gateway, please see the PC-Duo Gateway Administrator Guide.
PC-Duo Host Guide PC-Duo technologies PC-Duo remote desktop solutions utilize highly optimized technologies to deliver speed, performance and reliability, including: Highly efficient screen capture algorithms. PC-Duo utilizes two kinds of screen capture technology: Kernel-mode screen capture for Windows XP, Windows Server 2003 and older platforms.
PC-Duo overview PC-Duo services PC-Duo remote desktop solutions offer technicians a number of professional-quality services for investigating and solving problems on Host remote computers, including: Remote Control: ability to view screen activity on an end-user‟s remote machine, and with proper authorization, take control of and send keyboard/mouse inputs to the remote machine in real-time Remote Clipboard: ability to copy selected items on the screen of a remote machine into the clipboard on the re
PC-Duo Host Guide PC-Duo connection types PC-Duo services are performed over service connections between a PC-Duo Master (with appropriate access rights) and a PC-Duo Host. Service connections are established on demand, when a PC-Duo Master requests a service from a PC-Duo Host.
PC-Duo overview In order to execute this feature, both the MAC address and the last known IP address of the remote computer must be known. Since the PC-Duo Gateway knows both of these pieces of information, it is in a position to send the Wake-on-LAN signal.
PC-Duo Host Guide Peer-to-peer connections When a computer with PC-Duo Master establishes a direct connection to a computer with PC-Duo Host, the connection that is established is a peer-to-peer connection. By default, PC-Duo Master searches the network for Host computers when it starts up. Any Host computers it finds are listed on the Peer-to-Peer Hosts tab of the PC-Duo Master window.
PC-Duo overview Gateway-managed connections When a computer with PC-Duo Master establishes a connection to a computer with PCDuo Host through a central server (i.e. PC-Duo Gateway), the connection that is established is a Gateway-managed connection. In this way, the Gateway serves as a central location for managing and monitoring connections, configuration, security and reporting. Any Host computers found by the Gateway are listed on the Gateway Hosts tab of the PC-Duo Master window.
PC-Duo Host Guide Gateway (G)-managed connections from Master (M) to Host (H) . Firewall-friendly connections When PC-Duo Master users need access to Hosts that are outside the domain, and/or behind a firewall or NAT-device, normal peer-to-peer or Gateway-managed connections will not work. In these cases, it is difficult to find and maintain a secure remote support connection because of dynamic port assignments and other network challenges.
PC-Duo overview directly to PC-Duo Gateway for recording and/or further transmission to a PC-Duo Master. Note: Because TS sessions are captured at the Windows Server (and not at the end user device), PC-Duo Host effectively bypasses the technology used to remote the sessions to the end users, and will therefore be compatible with Microsoft Terminal Services clients as well as Citrix Presentation Server (now known as XenApp) clients.
PC-Duo Host Guide Limitations of TS Hosts Due to technical limitations and the nature of Terminal Services sessions, the following Host features are not supported.
PC-Duo overview PC-Duo security features One of the most valuable aspects of PC-Duo remote desktop solutions is the ability to create and enforce fine-grained access control policies, and to easily modify them to reflect changes in your organization.
PC-Duo Host Guide Authentication In the PC-Duo model, PC-Duo applications that request information and services are considered “clients” and those that provide information and services are considered “servers”. For example, the PC-Duo Master is considered a client when it connects to and requests a list of Hosts from a PC-Duo Gateway. In turn, the PC-Duo Gateway is considered a client when it connects to and requests information from a PC-Duo Host in the same domain.
PC-Duo overview or information to any PC-Duo application acting as a client until it can validate that client‟s identity.
PC-Duo Host Guide contact its domain controller, Windows authentication will not usually be available. Behind the scenes, the PC-Duo Gateway and the Host will exchange a 16-byte secret password that only they will know. As a result, in all subsequent connections, the PC-Duo Gateway and Host will have some measure of authentication when they are not in the same domain.
PC-Duo overview relationship Gateway-Host relationship Gateway Host No Gateway-managed (Master & Host are not in same domain) Master-Gateway relationship Master Gateway Yes Gateway-Host relationship Host Gateway Yes Authorization One of the strongest features of PC-Duo remote support solutions is the fine-grained access control.
PC-Duo Host Guide AES encryption (128-bit key) with SHA1 hash Triple-DES (3DES) encryption (192-bit key) with SHA1 hash RC4-compatible encryption (128-bit key) with MD5 hash NOTE: PC-Duo 10.0 applications and older support only RC4 encryption; thus, this would be the encrpytion option negotiated between a PC-Duo 11.0 or later application (e.g. PC-Duo Master) and PC-Duo 10.0 application (e.g. PC-Duo Host).
PC-Duo overview PC-Duo networking features PC-Duo remote desktop solutions support several standard transport protocols for computer-to-computer communication, and two types of network addressing schemas. Network protocols PC-Duo products support most of the standard networking and transport protocols, including: IP: IP is a general-purpose protocol supported on a wide variety of networks and servers.
PC-Duo Host Guide PC-Duo documentation and technical support Each of the four PC-Duo components has its own guide: PC-Duo Master Guide PC-Duo Host Guide PC-Duo Gateway Administrator Guide PC-Duo Deployment Tool Guide For more information about PC-Duo documentation and technical support, see: "Typographical conventions" "Technical support options" Typographical conventions in documentation PC-Duo documentation uses typographical conventions to convey different types of information.
PC-Duo overview File names and computer text can also be displayed in italics to indicate that you should replace the values shown with values appropriate for your enterprise. Key names Names of keyboard keys appear in SMALL CAPS. When you need to press two or more keys simultaneously, the key names are joined by a + sign: Press RETURN. Press CTRL+ALT+DEL.
Host Installation The Host can be installed on any computer that runs a supported operating system (OS) and meets the minimum requirements described in this section.
PC-Duo Host Guide Requirements The Host can be installed and operated on any computer that runs a supported operating system (OS) and meets the minimum requirements described in this section. Before installing the Host, note the following: If you plan to use the Host with the Gateway, then install the Host after you install the Gateway. See the Gateway Administrator Guide before installing the Host.
Host Installation The hardware requirements are: Minimum requirements – Same as those specified by Microsoft for the respective operating system. Recommended requirements – Same as those specified by Microsoft for the respective operating system. Installation requirements The following additional requirements are required or recommended for installation of the Host: Windows Installer 2.0 or later – Required by the installer. If needed, this upgrade is applied automatically when the setup.
PC-Duo Host Guide Installation notes The the Host can be installed using any of the following methods: “Install via command line utility” “Install via internet download” “Install via Deployment Tool” “Install via 3rd-party imaging tools” “Change station name with macros” “Configure security settings” “Configure Windows Firewall exceptions” “Configure network settings for IPX” Install via msiexec command line utility The Host can be installed manually by using the msiexec command line utili
Host Installation When a third-party utility program, such as Symantec Norton Ghost ™ or PowerQuest Drive Image, is used for operating system imaging, the following considerations must be taken into account when including the Host as part of an operating system image: Generate unique HostIDs Each the Host installation is identified by a unique identifier, called the HostID.
PC-Duo Host Guide -y do not ask for confirmation; default is to prompt before continuing -yes same as „-y‟ -guid deletes the HostID only, but does not prepare the settings -restart restarts the Host Service when compute; should only be used with „-guid‟ To prepare an installation for imaging, run hostprep.exe with no arguments, and press the “y” key when prompted. To delete the HostID on the local computer and cause a new one to be assigned immediately, run the command line “hostprep.
Host Installation RmHostId {078A9A01-6931-42A3-9371-EA00F1DC7D99} * This example enumerates the machines on the network, and deletes the HostID of any installations that match the specified ID. RmHostId {078A9A01-6931-42A3-9371-EA00F1DC7D99} MACHINE04 This example connects to the one machine named “Machine04”, and deletes the HostID on that machine if and only if it matches the specified ID.
PC-Duo Host Guide %VER% Host software version number (e.g. “v10.0.2.1003”) %PLATFORM% Host operating system platform (e.g. “Win2000”) %PROT% Network protocol (e.g. “IP” or “TCP”) %ADDR% Network address (e.g. “192.168.0.15”) %PORT% Network port (e.g. “1505”) Macros for Terminal Services session Hosts The following macros are available for customizing station name for Hosts running in Terminal Services sessions.
Host Installation Optionally, set the Accounts: Guest account status policy to disabled to prevent problems with guest authentication to the Host computer. NOTE: Depending upon which version of Windows you are using, and your Windows UI settings, the procedure above may vary. Items may be named differently and navigating to them may be slightly different as well. Note that in XP Home Edition, these security settings cannot be set and you must use simple password authentication.
PC-Duo Host Guide Licensing If you download this software on a 30-day trial basis and want to continue using the product, you may purchase it by contacting a preferred reseller, or by contacting us directly. Your purchase provides an appropriate license key to use with the Host. The software does not need to be reinstalled after you purchase it. The product package contains a license key that you can add to your existing installation.
Host Installation Upgrade a license key If you are upgrading your license, you will receive an Upgrade license key, which you should add using the instructions above. Both the original product license and the upgrade license will be listed on the About tab.
Host Operation The Host runs as a Windows service whenever you start up your computer. It can be configured to accept connections from a Master user in two different ways: “Peer-to-peer connections” between a Master computer and a Host computer. With these connections, authentication and authorization are enforced by the Host. “Gateway-managed connections” between a Master computer and a Host computer through a Gateway.
PC-Duo Host Guide Start the Host Control Panel Configuration options are managed through the Host Control Panel. It can be accessed in any of the following ways: Start the Host Control Panel from the Windows Start menu. Double-click the Host icon in your system tray (lower right corner of your monitor). Run the executable phost.exe located in the the Host program directory. The Host Control Panel window appears.
Host Operation to the terminal services template settings for the Host instance. These command line switches are mutually exclusive, and cannot be used in conjunction with any other (undocumented) switches. See the Terminal Services tab for more information about root Hosts and Host instances for terminal services sessions. Use the Host Control Panel to configure the Host features through the following tabs Tab Function Status To view connection status and/or disconnect a session.
PC-Duo Host Guide Status tab The Status tab indicates the current status of any remote control connections to your computer. View the status of a remote connection to your Host computer as follows: Whenever there is a remote connection to your Host computer, the network address and username will appear in the Connected to field. When a Master user makes a direct peer-to-peer connection to your computer, the Master user‟s account name and the network address will appear.
Host Operation General tab Use the General tab to change preferences. Change the following from the General tab: Station name: Modify the name by which your Host computer identifies itself to the Gateways and/or the Masters. To use macros to change the Station name automatically, see "Change Station name".
PC-Duo Host Guide Select Beep on connect/disconnect to hear a quick series of three tones rising in pitch whenever a remote connection succeeds. With this option, a series of tones falling in pitch will be made when the remote connection is terminated. Select Beep while connected every...seconds to hear a short tone, periodically throughout the duration of any remote connection. The interval between beeps can be set from 0 to 9999 seconds. To turn the feature off completely, set this to 0.
Host Operation Security tab To authenticate the identity of the Master users who request a connection to the Host, choose your preferred authentication method in the Security tab.
PC-Duo Host Guide To configure simple password authentication, consider the following options: Select Allow connection with a simple password from the Security tab to require simple password (or no password) for any remote connections to your Host computer. If you want to establish a password, type the same password in the Password and Confirm Password fields.
Host Operation One of the strongest features of the is the availability of fine-grained permissions. the Master users or groups can be added or deleted from three different sets of permissions: “Service Security tab”, defines permissions for services on this Host for the user or group selected. “Admin Security tab”, defines permissions for access to the Host Control Panel window. “Settings Security tab”, defines permissions for modifying configuration settings for the Host Control Panel window.
PC-Duo Host Guide Default Host security settings The following the Host security settings are set by default for Windows authentication: Service Security: The local machine‟s Administrators group and the default the Gateway domain user account (RemoteControlGateway) have full access to all the services. Also, any new accounts created on Gateways known to the Host will have full access.
Host Operation In the Service Security tab, you can perform the following tasks: Click Add to add a new the Master user or group for which you want to specify permissions. Select an existing the Master user or group that has permissions and click Remove to remove it. Select a Master user or group and click Allow or Deny in the list of Permissions. The individual permissions can be seen on the Advanced page.
PC-Duo Host Guide Special Permissions: Indicates a non-standard grouping of permissions not exactly matching one or more of the previously described groups. See “Permission Entry window - Service Security”. Click Advanced to specify permissions and open the Advanced Security Settings window. In the Permissions tab of the Advanced Security Settings window, select an entry for which you want to assign advanced permissions and click Edit.
Host Operation Each advanced permission is treated individually; click Allow or Deny for any of them. The following permissions exist: Connect for Services determines whether a domain account or machine-local account has permission to connect to this the Host computer. It does not determine what a Master user can do once connected to this the Host computer, but you must (through this setting) allow the connection permission for a Master the Master user or the Gateway for the remote connection to occur.
PC-Duo Host Guide the Windows Security settings for files and directories, so you must have read permission on the files and directories you want to access. File Transfer Write determines whether a Master user or a group has the ability to write files to the Host computer. Without this permission, the Master users cannot make any changes to files or directories on the Host computer. This permission gives you the right to use the File Transfer feature to write files.
Host Operation In the Admin Security tab, you can perform the following tasks: Click Add to add a Master user or group for which you will specify permissions. Select an existing the Master user or group that has permissions and click Remove to remove it. Select a Master user or group and click Allow or Deny for the list of Permissions, each of is a common grouping of individual permissions. The individual permissions can be seen on the Advanced page.
PC-Duo Host Guide In the Permissions tab of the Advanced Security Settings window, select an entry for which you want to assign advanced permissions and click Edit.
Host Operation Each advanced permission is treated individually; click Allow or Deny for any of them. The following permissions exist: Connect for Admin on Local Machine determines whether a Master user or a group has permission to connect to the Host settings. This setting does not determine what a Master user can do once connected to the Host for administration.
PC-Duo Host Guide Read Permissions determines whether a Master user or a group can view the Admin Security tab of the Host Security Settings window. Change Permissions determines whether a Master user or a group can modify the Admin Security tab permissions. Take Ownership determines whether a Master user or a group can take ownership. Settings Security tab Administrative settings for the Host Control Panel window can be modified in the Settings Security tab.
Host Operation Full User/Modify All Settings: Includes permissions to view and modify all Hostspecific settings, but does not include the Edit Security permission to change the security configuration. View All Settings: Includes View Basic Settings, View Configuration, View Licenses, View Gateway Configurations, and Read Permissions; allows all Host settings to be viewed (but not changed). Modify Basic Settings: Grants the Modify Basic Settings permission.
PC-Duo Host Guide In the Permissions tab of the Advanced Security Settings window, select an entry for which you want to assign advanced permissions and click Edit. The Permission Entry window opens: Each advanced permission is treated individually; click Allow or Deny for any of them. The following permissions exist: View Basic Settings determines whether a Master user or group can view the basic the Host settings.
Host Operation Modify Licenses determines whether a Master user or group can add license keys via Add License button on the About tab. Read Permissions determines whether a Master user or group can view the Settings Security tab of the Host Security Settings window. Change Permissions determines whether a Master user or group can modify permissions on the Settings Security tab. Take Ownership determines whether a Master user or group can take ownership.
PC-Duo Host Guide Options tab Use the Options tab to specify what happens to the keyboard, mouse, and display on your Host computer during a remote control connection. The following options can be configured from the Options tab: “Action on disconnect or termination” “Keyboard and mouse suppression” NOTE: Some of these options render your Host computer unusable by local the Master users, but you can override them. For more information, see “Confirm Host Options Settings”.
Host Operation Select Never suppress the local keyboard and mouse to retain control of the Host computer‟s keyboard and mouse when a Master user connects to the Host. Select Suppress local input, if the Master requests it to give a Master user control of the Host computer‟s keyboard and mouse when the Master user requests it. The default settings for the Host and the Master allow the mouse and keyboard to be shared during a connection, with each side able to use both.
PC-Duo Host Guide Access tab Restrict access and require explicit permission to connect through settings on the Access tab. Restrict access with the following options: “Access restrictions”: lock out connections to this Host. “Connection permission”: require explicit permission to connect to this Host. Access restrictions Lock out access to this Host computer: Select Permit connection (default) to permit remote connections from any authenticated the Master users to your Host computer.
Host Operation Select Lock out or Permit connection based on time zone to permit or prevent remote connections to your Host computer based on the day of the week and the time of day. You can specify permitted access by time when you click Time Zone Settings. Time zone settings Use the Time Zone Settings window to specify the times at which the Host computer is available for remote connections. The time map is divided into half-hour time slots for each day of the week.
PC-Duo Host Guide 2 minutes) within which you want to make a decision. If you do not respond within the specified time, the request is rejected automatically. Select Permission requested from Host if you want to grant an authenticated the Master user explicit permission to connect to your Host computer but you don‟t want it to be mandatory. If you do not respond within the specified time, the request is accepted automatically.
Host Operation Effects tab Graphical effects on the Host screen during remote control connections can be configured through settings on the Effects tab. By disabling visual effects, for example, the amount of screen data that is captured and transmitted over the network can be greatly reduced, improving speed and performance.
PC-Duo Host Guide Aero Glass (desktop composition) Background wallpaper or pattern Mouse shadows and trails Font smoothing and ClearType Menu shadows and Windows animations Show window contents while dragging Screen Saver 72
Host Operation Protocols tab Configure the network protocols and ports for communication with the Host in the Protocols tab. The UDP/IP, TCP/IP, and IPX check boxes enable/disable the network protocols that can be used for peer-to-peer or Gateway-managed connections to the Host. To the right of each check box is a Port list. Use the Port list to select or enter the specific port number on which the Host computer should listen for each enabled protocol.
PC-Duo Host Guide If you check Use Encryption, data exchanged over remote control connections are protected with an encryption algorithm negotiated with the client (see the “Selecting ciphers” for more information about encryption). NOTE: the Host can be installed on a computer that is also running the Gateway. Both programs can have the IP protocol enabled, because they use different UDP ports (Host uses 1505, Gateway uses 2303). However, the two programs must compete for a single IPX port.
Host Operation TCP/IP address restrictions Access to the Host over TCP can be restricted according to the IP address of the Gateway or the Master trying to connect with it. Press Restrictions to specify a policy for granting Host computer access according to IP address: Grant or deny access by default and then specify a list of exceptions according to specific IP address. This policy, along with the exceptions, is applied before any authentication security rules you configure in the Security tab.
PC-Duo Host Guide There are five options available: Select Single Computer (at one IPv4 address) and enter an IP address in the Address field. Select Group of computers (by IPv4 subnet mask) and enter the appropriate values into Address and Mask. Select Group of computers (by IPv4 start address & count), enter the first address in a range in the Address field, and enter the number of addresses in the range in the Number of addresses field.
Host Operation Gateways tab Hosts can be configured to report to one or more Gateways. For security purposes, all connection attempts can be forced to go through the specified Gateways by selecting Permit connection only through listed Gateways on the Gateways tab. With this option, administrators can take advantage of Gateway-based security policies and prevent unauthorized connections via peer-to-peer or unlisted Gateways.
PC-Duo Host Guide “Move Down” “Details” “Resend Status” “View Error” The Host Workstation ID is a unique identifier generated at installation time, which the Gateway uses for reporting and reference purposes. Manage Gateway order The ability to control the order of the Gateway list allows the Master user to control the order in which connections are attempted. The Host will automatically go down the list in order to establish a connection and report to a Gateway.
Host Operation If you do not know the station name and/or address of the Gateway to which you want to connect, click Find Gateway. The Find Gateway Wizard appears. Follow the instructions on the wizard and click Finish when you are done. If you know the station name and/or address of the Gateway to which you want to connect, follow these steps: i Select the protocol to use from this list. ii Specify the port number if it is not standard (default standard port is 2303).
PC-Duo Host Guide the Host and use it to deliver other services such as remote control, file transfer, etc. The potential downside of always maintaining the reverse connection is the overhead necessary to maintain these persistent connections. When multiple hosts are involved this overhead can add up to an unacceptable level for some LANs. (3) Automatically determine if reverse connection is necessary.
Host Operation To edit the connection settings (protocol, port, or address) for any the Gateway, follow these steps: 1 Select any the Gateway listed on the Gateways tab. 2 Click Edit Gateway. The Gateway Connection Properties window appears. 3 Modify the information as you require, and click OK. Remove Gateway To remove any listed the Gateway, follow these steps: 1 Select any the Gateway listed on the Gateways tab. 2 Click Remove Gateway on the Gateways tab.
PC-Duo Host Guide View Error View Errors causes the Host to display a report showing SSL certificate errors.
Host Operation Screen tab the includes two different types of screen capture technology: Kernel-mode screen capture: Uses kernel-mode drivers to capture screen data. This is the default option on Windows XP, Windows 2003 Server and older platforms. Display Filter Driver (DFD): kernel-mode code supported on Windows XP, x86 only. Requires kernel-mode driver to process data. Installed by default, but activated only if the Mirror Display Driver is not loaded.
PC-Duo Host Guide By default, the Host will try to use kernel-mode screen capture first. If the kernel mode drivers are not present or not working, the Host will automatically switch to user-mode, and will apply the currently selected screen capture profile (the default profile is "High Quality/High Bandwidth".
Host Operation Bandwidth throttling The user-mode screen capture technology has the ability to "throttle" itself to a restricted amount of bandwidth. This may be preferable when responsiveness and throughput are more important than screen quality, particularly over low-bandwidth connections. The amount of throttling is controlled by parameters set in a "user-mode screen capture profile".
PC-Duo Host Guide Polling frequencies (three values -- Capture Rate, Foreground, and Background, in milliseconds). Note however that the UI will display these values on a scale of 1 to 10, with 1 being the least aggressive (longest time), and 10 being the most aggressive (shortest time). The underlying API and settings storage will have the raw millisecond values.
Host Operation You can create your own custom profile by selecting [Custom] from the drop-down list and specifying your desired parameters.
PC-Duo Host Guide About tab View product and license key information in the About tab NOTE: To configure a Host to support one or more Terminal Services sessions, the Host must have a special Terminal Services license key. This key will enable the Terminal Services tab in the Host Control Panel and will enable the Host to support a specified number of Terminal Services sessions simultaneously.
Host Operation Add a license key To add a license key to the License(s) list, follow these steps: 1 Click Add License. The Add License Key window appears. 2 Enter a license key in the field provided. 3 Click OK. Generate a System Information report For auditing and technical support purposes, the Host includes a utility to generate a dump file of configuration information about the Host computer. Click System Information on the About tab create this detailed report.
PC-Duo Host Guide The system information report is automatically generated and saved as a plain text file on your desktop. The name of the text file is derived from your computer name and ends with _Config.txt.
Host Operation Terminal Services tab Hosts can be configured to allow remote viewing and remote control of one or more simultaneous Terminal Services sessions, as well as the Terminal Services server console. A standard Host with a special TS license key must be installed and configured on the server console to serve as the "root".
PC-Duo Host Guide Most of the configuration options are the same as those available on the standard Host Control Panel, although the About and Status tabs are not present because the settings on these tabs are not directly applicable to TS Hosts. Note that the macro %USER%o%NAME% is used to distinguish each terminal session Host instance, where NAME is the name of the terminal server.
Host Operation For more information about specific configuration settings available for the Terminal Services template, see below: “General tab” “Security tab” “Options tab” “Access tab” “Effects tab” “Protocols tab” “Gateways tab" “Screen tab" Once the Host instance for a specific Terminal Services session is started, you can view the effective settings for this Host instance by clicking on the Host Control Panel icon in the TS session: 93
PC-Duo Host Guide Note that the title bar shows the session number (in this case, "Session 1"). Each root Host is capable of supporting as many simultaneous sessions as the license key allows. You can view information about the root Host by selecting Connect to root. The Control Panel for the root Host will appear. The configuration information in the Control Panel for terminal session Hosts is view only mode because the settings are based on the settings in the root Host Control Panel.
Host Operation In this example, whenever a user with administrator credentials for the VMWARE domain gets a terminal session, the root Host on the terminal server will inject a Host instance.
PC-Duo Host Guide General tab The General tab allows you to set some preferences about appearance and notifications for terminal session Hosts. You can change the following from the General tab: Station name: Modify the name by which your Host computer identifies itself to the Gateways and/or the Masters. To use macros to change the Station name automatically, see "Change Station name".
Host Operation Beeping: Set auditory cues to indicate when a Master user requests to connect to your Host computer. Select Beep on connect/disconnect to hear a quick series of three tones rising in pitch whenever a remote connection succeeds. With this option, a series of tones falling in pitch will be made when the remote connection is terminated. Select Beep while connected every...seconds to hear a short tone, periodically throughout the duration of any remote connection.
PC-Duo Host Guide The following authentication methods are available: “Simple password configuration” “Windows authentication configuration” “Shared secret password authentication” Options tab Use the Options tab to specify what happens to the keyboard, mouse, and display on your Host computer during a remote control connection.
Host Operation The following options can be configured from the Options tab: “Keyboard and mouse suppression” (disabled for terminal session Hosts) “Action on disconnect or termination” NOTE: Some of these options render your Host computer unusable by local the Master users, but you can override them. For more information, see “Confirm Host Options Settings”. Access tab Restrict access and require explicit permission to connect through settings on the Access tab.
PC-Duo Host Guide Restrict access with the following options: “Access restrictions”: lock out connections to this Host. “Connection permission”: require explicit permission to connect to this Host. “Access to Host settings” (disabled for terminal session Hosts) Effects tab Graphical effects on the Host screen during remote control connections can be configured through settings on the Effects tab.
Host Operation Choose one of three options to determine whether or not visual effects should be disabled: Enable visual effects on the Host computer: Select Never disable effects to keep current visual effects settings on the Host in place. Allow the Master user to disable some or all visual effects on the Host computer: Select Upon request, permit Master to disable selected effects (this is default option). Check any options under Visual Effects which you want the Master user to have control over.
PC-Duo Host Guide Font smoothing and ClearType Menu shadows and Windows animations Show window contents while dragging Screen Saver Protocols tab Configure the network protocols and ports for communication with the Host in the Protocols tab. These settings are disabled for terminal session Host instances because they do not listen for connections; the root Host, however, will specify protocol(s) to be used for its connection to the Gateway..
Host Operation Gateways tab The root Host for must be configured to report to one or more the Gateways; it is through these connections that terminal services session Hosts will be reached. Note that connection status icon next to Gateway entries and the Host Workstation ID are generic in the root Host template. These will be replaced by actual icons and values when the Host service is started in the terminal session (see Terminal Services tab for an example).
PC-Duo Host Guide “Move Up” “Move Down” “Details” “Resend Status” “View Error” The Host Workstation ID is a unique identifier generated at installation time, which the Gateway uses for reporting and reference purposes. Manage Gateway order The ability to control the order of the Gateway list allows the Master user to control the order in which connections are attempted. The Host will automatically go down the list in order to establish a connection and report to a Gateway.
Host Operation The Screen tab for Terminal Services Hosts indicates that user-mode screen capture algorithm is the only option, and also indicated the preferred user-mode screen capture profile.
PC-Duo Host Guide Open chat window When there is an active connection to your Host, a chat room is automatically created that will include the Master user connected to the Host, and if it is a Gateway-managed connection, any other Master users connected to the same Host. To send and receive text messages with other members of the chat room, right-click on the tray icon on the Windows task bar and select Open chat window from the context menu. A chat window will appear.
Host Operation Set up remote printing One of the key services provided by the remote support solutions is remote printing. the Master users will usually use this service to redirect a print command on the Host to a printer that is connected locally to the Master. However, in order to enable this service, the Host computer must be configured for remote printing.
Command Line Configuration The following combination of the Host and Windows tools can be used to customize and automatically deploy the Host to one or more target machines in your network: Use the command line utility PHSETUP to set the Host configuration options from a command line. See "Configure Host from the command line." In addition to specifying options in the Host Control Panel window, use PHSETUP to lock down other the Host features. See “Lock-down settings”.
PC-Duo Host Guide Configure Host from the command line After installation, the Host can be configured using the PHSETUP command line utility. Settings that do not explicitly change in the command line retain their current values. PHSETUP updates the settings in the registry, and updates any copy of the Host that is currently running on the computer on which you execute PHSETUP.
Command Line Configuration PHSETUP command line syntax Set PHSETUP parameters directly from the command line, separating each parameter name and its value with a colon, as in the following: phsetup param1:value1 param2:value2 ... paramn:valuen The following is a specific example: phsetup name:"JOE's PC" connectbeep:yes Different parameters require different formats, as shown below.
PC-Duo Host Guide PHSETUP executes the commands in a specified text file, each command in the file is executed in sequence. See “PHSETUP control parameters”. PHSETUP syntax examples The following examples illustrate how you can use PHSETUP to configure the Host: Set the Host computer station name to HowdyDoody phsetup name:HowdyDoody Set the Host computer station name to Julia’s Game Machine phsetup name:"Julia's Game Machine" Set the Host computer station name to Julia’s "little" Machine.
Command Line Configuration setservicesecurityowner:Administrators removeadminsecurityace:* addadminsecurityace:Administrators,0xE003F addadminsecurityace:Interactive,0x03 setadminsecurityowner:Administrators removesettingssecurityace:* addsettingssecurityace:Administrators,0xE00FF setsettingssecurityowner:Administrators NOTE: Enter all commands and parameters on one line. Due to limited page width, some of the following examples present commands on multiple lines.
PC-Duo Host Guide PHSETUP access parameters The following PHSETUP parameters correspond to the "Access tab" settings in the Host. Parameter Definition Set access restrictions. access:permit access:locked access:time Set to permit to allow access to the Host computer after security is checked. Set to locked to deny all remote control access to the Host computer. Set to time to require a timezone setting (that you must also specify).
Command Line Configuration permitted. If you set request or grant, you must also specify the requesttime or granttime. lockworkstationondefault: yes|no By default, this setting is set to yes to automatically lock workstation if access permission is not granted. Set this to no to prevent workstation from being locked. requesttime:number Set the number of seconds during before time-out for the consideration of a remote control request to the Host computer. Set this number between 1 and 999.
PC-Duo Host Guide through Sunday and the subsequent days of the week. See “Time zone settings”.
Command Line Configuration PHSETUP control parameters The table below lists and defines PHSETUP control parameters. Parameter @path&filename Definition Create a text file the includes a series of PHSETUP commands. Use this parameter with a call to PHSETUP to run the text file (command line script) (referred to here as filename), and process the PHSETUP commands listed in the text file exactly as if you were to call them directly from PHSETUP.
PC-Duo Host Guide /s (peer-to-peer) Specify the station when connecting directly to a Host computer for the purpose of configuring it. This value is in quotes, and is the string value for the station name, DNS name, or network address specifier for peer-to-peer connections. The peer-to-peer syntax depends on your protocol specification. The following are some protocol-specific examples: /pUDP /pTCP /pTCP /pIPX /S192.168.160.138 /Sjackson /Sjackson.acme.
Command Line Configuration /u“domain\username " When configuring a Host computer, specify a user account name to use when connecting to the Host computer (either peer-to-peer, or through a Gateway). You need only specify the user account name when your logged in credentials are not sufficient for configuring the Host computer (either directly, or through a Gateway).
PC-Duo Host Guide This command can be used in the following ways: • mode:reset, to reset standard settings to program defaults. mode:reset • mode:lockdown mode:reset, to lift the lockdown of settings. • mode:terminalservices mode:reset, to reset the terminal services template settings to program defaults. NOTE: When you use the mode:lockdown parameter to lock down the Host, you cannot use the /p, /g, /s, /x, or /u parameters. See “Lock Host settings” for more information on this control.
Command Line Configuration PHSETUP effects parameters The following PHSETUP parameters correspond to the "Effects tab" settings in the Host. Parameter Definition Set to always to managevisualeffects: always managevisualeffects: permit managevisualeffects: off managevisualeffects: never visualeffects: number disable visual effects whenever a remote connection is established. Set visualeffects flags when you use this setting. Set to never or off to deny remote users from controlling visual effects.
PC-Duo Host Guide and window animation 0x0020 - Show Window contents while dragging 0x0040 Screen saver The default is 0x7F (all effects).
Command Line Configuration PHSETUP error handling One or more of the following error messages may be returned if you supply mode:interactive at the beginning of the command line call to PHSETUP. If you pass bad credentials to the /u or /x parameters, PHSETUP detects the failure to connect to the settings, displays an error message, and then exits. Note that if you use a bad user account name in adding an ACE (access control entry) to a security descriptor, PHSETUP does not detect any problem.
PC-Duo Host Guide PHSETUP Gateways parameters The following PHSETUP parameters correspond to the "Gateways tab" settings in the Host. Parameter Definition Set to yes to require that all remote control connections to this Host computer pass through a Gateway. requiregateway: yes Set addgateway when you use this setting. Set to no (default behavior) to allow peer-to-peer remote control connections that do not pass through a Gateway. Add a specified Gateway to which the Host can report.
Command Line Configuration Remove a specified Gateway to which the Host is configured to report. You can use the following values: protocol = TCP, UDP, SSL or IPX NOTE: You can also specify the port, as in “ addgateway: “protocol|port”, “station_specifier” ”.
PC-Duo Host Guide PHSETUP general parameters The following PHSETUP parameters correspond to the "General tab" settings in the Host. Parameter Definition Use this parameter to set a beeper to sound every number seconds. beepevery:number No beeper sounds if you set number to 0. Supply a number in the range 0 to 9999.
Command Line Configuration 0x2 - File Transfer Use this parameter to provide a string that specifies a new station name. name:string NAME parameter macros The NAME parameter provides support for static substitution of station name.
PC-Duo Host Guide PHSETUP license parameter The following PHSETUP parameter corresponds to the "About tab" settings in the Host. 128 Parameter Definition addlicense:string Add a license string (that you specify with the value string) to the current copy of the Host.
Command Line Configuration PHSETUP options parameters The following PHSETUP parameters correspond to the "Options tab" settings in the Host. Parameter Definition lockworkstationondisconnect:yes Set to yes to lock the Host computer when a remote user‟s session is over. rebootondisconnect:on Set to on to restart the Host computer when a remote session is over. Otherwise set to off (default the Host behavior).
PC-Duo Host Guide PHSETUP protocol parameters The following PHSETUP parameters correspond to the "Protocols tab" settings in the Host. Parameter encryption:on encryption:off 130 Definition Set to on to encrypt all remote data exchanges. Otherwise set to off. ip:on ip:off Specify whether (on) or not (off) this Host computer „listens‟ on the UDP/IP protocol, or accepts connections on that protocol. Specify ipport when you set this on. ipport:number Set the port number for IP usage.
Command Line Configuration tcp:on tcp:off Specify whether (on) or not (off) this Host computer supports the TCP/IP protocol. Specify tcpport when you set this on. tcpport:number Set the port number for TCP/IP usage. The value number is an unsigned hexadecimal, octal or decimal short integer. Set to 0 to use the default port. tcpaccessmode:grant tcpaccessmode:deny Determine whether (grant) or not (deny) to grant or deny most TCP/IP traffic. Set tcprestrictions to define exceptions to this policy.
PC-Duo Host Guide preferredciphers:ciph ers 132 Set the list of encryption ciphers in order of preference from first to last. Ciphers are encoded as a twocharacter string, where the first character indicates the cipher algorithm, and the second character indicates the number of bits used. the Host v11.
Command Line Configuration PHSETUP security parameters The PHSETUP parameters in this section correspond to "Security tab" settings in the Host. usewindowssecurity:yes The usewindowsecurity:yes command lets you use Windows security mechanisms for the Host authentication. When set to yes, the adminpassword, password and adminpasswordrequired settings that are described in the next section are ignored.
PC-Duo Host Guide PHSETUP screen parameters The following PHSETUP parameter corresponds to the "Screen tab" settings in the Host. Parameter Definition preferusermode:yes|no By default, this setting is set to no on Windows XP, Windows 2003 Server and older platforms so that kernelmode screen capture is used. Set this setting to yes to use user-mode screen capture on host platforms. By default, this setting is set to yes on Windows Vista, Windows Server 2008 and later platforms.
Command Line Configuration PHSETUP Windows security parameters The following PHSETUP parameters correspond to Windows security settings on the "Security tab" in the Host. Parameter Definition addservicesecurityace:user,flags Set flags to specify service security options (in hexadecimal format) for a given user account name. See “Service Security tab”.
PC-Duo Host Guide Set flags to remove service security rights for a given user (use the removeservicesecurityace:user addadminsecurityace:user,flags setadminsecurityowner:user domain\usernam e syntax). Use the * wildcard to remove service security rights for all users, or *\user for the user in all domains, or domain\* for all users in the specified domain. Set flags to specify the administration security rights (in hexadecimal format) for a given user account. See “Admin Security tab”.
Command Line Configuration Use the * wildcard to remove admin security rights for all users, or *\user for the user in all domains, or domain\* for all users in the named domain. addsettingssecurityace:user,flag s setsettingssecurityowner:user Set flags to specify settings security (in hexadecimal format) for a given user account. See "Settings Security tab".
PC-Duo Host Guide users, or *\user for the user in all domains, or domain\* for all userusers in the named domain.
Command Line Configuration Install Host with the MSIEXEC command line MSIEXEC is an executable Microsoft program that interprets packages and installs products. You can install or uninstall the Host from the command line using standard MSIEXEC commands. This section describes a partial list of the MSIEXEC commands. For a detailed list of commands, check the Microsoft web site (http://www.microsoft.com), and enter “msiexec command line” as a Search item.
PC-Duo Host Guide Specify a user interface level: /qn No user interface /qb Basic user interface /qr Reduced /q n|b|r|f user interface, modal dialog displayed at the end of installation /qf Full user interface with modal dialog displayed at the end of installation Specify path to log file. Flags indicate which information to log.
Command Line Configuration The following table contains a partial list of MSIEXEC setup options: Option Command Line Description /s setup.exe /s /a setup.exe /a Run MSI installation in administrative mode /x setup.exe /x Uninstall the application Run the setup.exe portion of the MSI in silent mode. Force setup.exe to /w setup.exe /w wait until the installation is complete before exiting. Pass the parameters to msiexec.exe. /v setup.
PC-Duo Host Guide HOSTSETTINGS The required the Host configuration properties that are passed to the PHSETUP utility. See “Configure Host from the command line”. Setting this value to "1" disables the ability to Add/Remove/Modify the product via Control Panel. ARPSYSTEMCOMPONENT NOTE: Default value "0" allows users to modify the program through Add/Remove Programs. Use the TRANSFORMS TRANSFORMS INSTALLDIR REBOOT { Force | Suppress | ReallySuppress } property to specify any transforms (*.
Command Line Configuration installer is configured to reboot at the end of a silent installation, unless otherwise overridden by the REBOOT parameter. This is true for both the MSI and the Setup.exe. NOFIREWALLCONFIG Turn off automatic registration of the Host as an exception to Windows Firewall. If this is set to a nonblank value, no firewall configuration is done by the installer. The default is that this property is not set, and the installer does the firewall configuration.
PC-Duo Host Guide The first example silently runs the Host installer file located in the C:\Program Files\...\Host directory and suppresses the REBOOT at the end of the installation, and then, through PHSETUP commands, assigns the Host computer name to “apple,” sets the password to “core.” msiexec /qn /I Host.msi LICENSE=1234567890 REBOOT=Suppress HOSTSETTINGS=”name:””apple password:core””” INSTALLDIR=”c:\Program Files\...
Command Line Configuration Lock-down settings Use the Host lock-down feature to set individual settings to permanent values. "Lock Host settings" "Unlock Host settings" The lock-down feature differs from setting permissions in several ways: Settings lock-down is granular. Individual settings can be locked down. The security features work on groups of settings, not individual ones. Settings lock-down is permanent.
PC-Duo Host Guide NOTE: You must be a member of the group used to create the lockdown originally (either RC Host Admins or Remote Control Host Admins). That group must be have the same authority (local machine or domain) as the group that executed the original lockdown.
