| Author |
Message |
James W. Long
Guest
|
Posted:
Wed Mar 02, 2005 2:52 am Post subject:
Netmeeting Certificates |
|
|
Hi all
I would like to know how I do authentication certificates for netmeeting,
particularly as it applies to remote desktop sharing if that makes a
difference.
How do I "make/get/create" certificates?. how do I hand them out, ie how
does a client get them?
I want to make sure of 1 thing, this person has a cert we issued,
and is there a way to specify who is allowed access for remote desktop
for remote desktop ?
how do I manipulate netmeeting policy, like is there more options
available to secure it so the user cant disable remote desktop sharing
and so they cant uncheck automatic answer?
Thank you,
James Long |
|
| Back to top |
|
 |
Brian Sullivan MVP
Guest
|
Posted:
Wed Mar 02, 2005 4:42 am Post subject:
Re: Netmeeting Certificates |
|
|
On Tue, 01 Mar 2005 21:52:11 GMT, James W. Long wrote:
| Quote: | Hi all
I would like to know how I do authentication certificates for netmeeting,
particularly as it applies to remote desktop sharing if that makes a
difference.
How do I "make/get/create" certificates?. how do I hand them out, ie how
does a client get them?
I want to make sure of 1 thing, this person has a cert we issued.
|
AFAIK certificates in NetMeeting are used for encryption only -- not
authentication.
| Quote: |
and is there a way to specify who is allowed access for remote desktop
for remote desktop ?
|
Only by controlling access to the required login/passwords.
| Quote: | how do I manipulate netmeeting policy, like is there more options
available to secure it so the user cant disable remote desktop sharing
and so they cant uncheck automatic answer?
|
By design the connecting user has full administrative control of the
desktop so I can't see where any policy setting can help.
--
Brian Sullivan (MVP)
Meeting by Wire ( www.meetingbywire.com) |
|
| Back to top |
|
 |
James W. Long
Guest
|
Posted:
Wed Mar 02, 2005 7:13 pm Post subject:
Re: Netmeeting Certificates |
|
|
Dear Brian:
Thank you for your reply:
I have answered inline below.
James W. Long.
"Brian Sullivan MVP" <brians@WORMTIREDmeetingbywire.com> wrote in message
news:8l2eo7hycyyc$.1jmcj51bizpxa$.dlg@40tude.net...
| Quote: | On Tue, 01 Mar 2005 21:52:11 GMT, James W. Long wrote:
Hi all
I would like to know how I do authentication certificates for
netmeeting,
particularly as it applies to remote desktop sharing if that makes a
difference.
How do I "make/get/create" certificates?. how do I hand them out, ie
how
does a client get them?
I want to make sure of 1 thing, this person has a cert we issued.
AFAIK certificates in NetMeeting are used for encryption only -- not
authentication.
|
in the docs it says that certs can be used for authentication as well as
encryption,
if no cert is issued then netmeeting uses the default windows cert which is
only for encryption.
| Quote: |
and is there a way to specify who is allowed access for remote desktop
for remote desktop ?
Only by controlling access to the required login/passwords.
|
Are these "netmeeting" passwords or are you referring
to the password prompt you get when connection to a remote
desktop? In the latter case I use our administrative username and
password for our domain. If there are netmeeting-specific passwords
set within netmeeting, I would like to know where those are set.
| Quote: |
how do I manipulate netmeeting policy, like is there more options
available to secure it so the user cant disable remote desktop sharing
and so they cant uncheck automatic answer?
By design the connecting user has full administrative control of the
desktop so I can't see where any policy setting can help.
|
Nothing prevents a user from right clicking remote desktop sharing and
selecting "Turn Off Remote Desktop Sharing". I dont even want them to have
that option. is that possible?
Thank you,
James W. Long
|
|
| Back to top |
|
 |
Brian Sullivan MVP
Guest
|
Posted:
Wed Mar 02, 2005 7:55 pm Post subject:
Re: Netmeeting Certificates |
|
|
On Wed, 02 Mar 2005 14:13:59 GMT, James W. Long wrote:
| Quote: |
AFAIK certificates in NetMeeting are used for encryption only -- not
authentication.
in the docs it says that certs can be used for authentication as well as
encryption,
if no cert is issued then netmeeting uses the default windows cert which is
only for encryption.
|
I can't think where this authentication occurs -- other than by the
standard user/password process which is not certificate based afaik(or is
there some mechanism for using a cert there?)
| Quote: |
and is there a way to specify who is allowed access for remote desktop
for remote desktop ?
Only by controlling access to the required login/passwords.
Are these "netmeeting" passwords or are you referring
to the password prompt you get when connection to a remote
desktop? In the latter case I use our administrative username and
password for our domain. If there are netmeeting-specific passwords
set within netmeeting, I would like to know where those are set.
|
There are no special NetMeeting passwords on NT,2000,2003,XP systems. The
authenication uses the normal name/password process. On Win9x RDS passwords
are determined during RDS setup.
| Quote: |
how do I manipulate netmeeting policy, like is there more options
available to secure it so the user cant disable remote desktop sharing
and so they cant uncheck automatic answer?
By design the connecting user has full administrative control of the
desktop so I can't see where any policy setting can help.
Nothing prevents a user from right clicking remote desktop sharing and
selecting "Turn Off Remote Desktop Sharing". I dont even want them to have
that option. is that possible?
|
Which "user" are you talking about here -- the one that connects to the
desktop via rds or the user that is using the machine locally?
Is this (http://www.jsifaq.com/SUBG/TIP3100/rh3110.htm) what you are
attempting do?
--
Brian Sullivan (MVP)
Meeting by Wire ( www.meetingbywire.com) |
|
| Back to top |
|
 |
James W. Long
Guest
|
Posted:
Wed Mar 02, 2005 11:09 pm Post subject:
Re: Netmeeting Certificates |
|
|
"Brian Sullivan MVP" <brians@WORMTIREDmeetingbywire.com> wrote in message
news:huqud1luu45l.18dhg8n4fl0oi.dlg@40tude.net...
| Quote: | On Wed, 02 Mar 2005 14:13:59 GMT, James W. Long wrote:
AFAIK certificates in NetMeeting are used for encryption only -- not
authentication.
in the docs it says that certs can be used for authentication as well as
encryption,
if no cert is issued then netmeeting uses the default windows cert which
is
only for encryption.
I can't think where this authentication occurs -- other than by the
standard user/password process which is not certificate based afaik(or is
there some mechanism for using a cert there?)
|
run netmeeting
tools->options->security
certificate section at the bottom
radio button: use this certificate for privacy and authentication.
| Quote: |
and is there a way to specify who is allowed access for remote desktop
for remote desktop ?
Only by controlling access to the required login/passwords.
Are these "netmeeting" passwords or are you referring
to the password prompt you get when connection to a remote
desktop? In the latter case I use our administrative username and
password for our domain. If there are netmeeting-specific passwords
set within netmeeting, I would like to know where those are set.
There are no special NetMeeting passwords on NT,2000,2003,XP systems. The
authenication uses the normal name/password process. On Win9x RDS
passwords
are determined during RDS setup.
|
ok, we are running all win2k
| Quote: |
how do I manipulate netmeeting policy, like is there more options
available to secure it so the user cant disable remote desktop sharing
and so they cant uncheck automatic answer?
By design the connecting user has full administrative control of the
desktop so I can't see where any policy setting can help.
Nothing prevents a user from right clicking remote desktop sharing and
selecting "Turn Off Remote Desktop Sharing". I dont even want them to
have
that option. is that possible?
Which "user" are you talking about here -- the one that connects to the
desktop via rds or the user that is using the machine locally?
|
the one at the computer who uses it normally.
I need to remotedesktop in as the system admin whenever I want
and I dont need them messing with my ability to do so.
If they (the normal user) can click that off, Im done. I cant get in.
| Quote: |
Is this (http://www.jsifaq.com/SUBG/TIP3100/rh3110.htm) what you are
attempting do?
--
Brian Sullivan (MVP)
Meeting by Wire ( www.meetingbywire.com) |
|
|
| Back to top |
|
 |
Brian Sullivan MVP
Guest
|
Posted:
Wed Mar 02, 2005 11:26 pm Post subject:
Re: Netmeeting Certificates |
|
|
On Wed, 02 Mar 2005 18:09:51 GMT, James W. Long wrote:
| Quote: | run netmeeting
tools->options->security
certificate section at the bottom
radio button: use this certificate for privacy and authentication.
|
Yes I know it says that -- I am not sure what exactly that was intended to
mean though.
| Quote: | the one at the computer who uses it normally.
I need to remotedesktop in as the system admin whenever I want
and I dont need them messing with my ability to do so.
If they (the normal user) can click that off, Im done. I cant get in.
|
The url I provided should allow you to hide the system tray icon. If the
user though has administrative privileges they can still subvert this with
effort.
--
Brian Sullivan (MVP)
Meeting by Wire ( www.meetingbywire.com) |
|
| Back to top |
|
 |
|
|
|
|