Does anyone have a TightVNC guide for business use?
-
@scottalanmiller Why would you need a jumpbox for this? The system will be local, or connecting over VPN.
-
@DustinB3403 said in Does anyone have a TightVNC guide for business use?:
@coliver I'll give you an example of an issue I just had.
Supervisor A wants me to setup folder access for Employee A on device A.
Supervisor A insist the computer is online, I insist it is not. Employee A is no where around (day off). Supervisor A (after 40 minutes of farting around) "Oh Employee A swapped the computers around, so A is B and B is A."
Sounds like bad issue all the way around, Setup folder shares on endpoint devices? of course here supervisors can't request access to employees files without CEO/COO approval.
-
@Jason Let's just agree to disagree...
-
@Jason said in Does anyone have a TightVNC guide for business use?:
@DustinB3403 said in Does anyone have a TightVNC guide for business use?:
@coliver I'll give you an example of an issue I just had.
Supervisor A wants me to setup folder access for Employee A on device A.
Supervisor A insist the computer is online, I insist it is not. Employee A is no where around (day off). Supervisor A (after 40 minutes of farting around) "Oh Employee A swapped the computers around, so A is B and B is A."
Sounds like bad issue all the way around, Setup folder shares on endpoint devices? of course here supervisors can't request access to employees files without CEO/COO approval.
Is it a remote folder share, eg, a windows mount to a server? Or literally setting up a local share from a users PC. If it is the latter I'm going to have to agree with @Jason that's just not good practice, and can lead to all kinds of trouble similar to IT knowing someone else's password.
-
@coliver the end client just needed read access to an existing server share.
Nothing is ever hosted from the client to the network.
-
@DustinB3403 said in Does anyone have a TightVNC guide for business use?:
@coliver the end client just needed read access to an existing server share.
Nothing is ever hosted from the client to the network.
Ah, Ok we're good then no harm there.
Any reason you can't do this with GPs?
-
GPO's aren't something we'd bother with for part time employees.
Plus a better remote support solution would be nice.
-
@DustinB3403 said in Does anyone have a TightVNC guide for business use?:
@coliver the end client just needed read access to an existing server share.
Nothing is ever hosted from the client to the network.
Then why do you need to even get on the client? all that can be done server side
-
@Jason said in Does anyone have a TightVNC guide for business use?:
@DustinB3403 said in Does anyone have a TightVNC guide for business use?:
@coliver the end client just needed read access to an existing server share.
Nothing is ever hosted from the client to the network.
Then why do you need to even get on the client? all that can be done server side
In special PEBKAC cases to resolve the issue is much easier than to try and teach.
-
@DustinB3403 said in Does anyone have a TightVNC guide for business use?:
GPO's aren't something we'd bother with for part time employees.
Huh? You just do one GPO with group filterings on the mappings based on who gets it. Use the same groups that give premissions to map the drive makes it really simple. If they are in a group that gives them permissions then they will automatically get the drive mapping.
Part-Time vs Full time doesn't change IT practices.
-
@DustinB3403 said in Does anyone have a TightVNC guide for business use?:
@Jason said in Does anyone have a TightVNC guide for business use?:
@DustinB3403 said in Does anyone have a TightVNC guide for business use?:
@coliver the end client just needed read access to an existing server share.
Nothing is ever hosted from the client to the network.
Then why do you need to even get on the client? all that can be done server side
In special PEBKAC cases to resolve the issue is much easier than to try and teach.
You don't teach anything for this.. It should all be automatic and semi-less to the user if IT is doing it's job properly.
-
@Jason you're missing the point in this case (I also might not have mentioned it)
But a casual needed only read access to a sub-sub folder on a network share with Read only access.
I'm not going to create a GPO for this.
-
@Jason That's a separate issue that I argued about.
-
@DustinB3403 said in Does anyone have a TightVNC guide for business use?:
@Jason you're missing the point in this case (I also might not have mentioned it)
But a casual needed only read access to a sub-sub folder on a network share with Read only access.
I'm not going to create a GPO for this.
Okay? Why would the fact that it's read only change how it's deployed? This is IT going about things wrong.
-
@Jason We already have GPO's configured for permissions.
IT making a custom GPO that over rides the existing GP's for just this 1 user is insane. That is bad IT.
-
@DustinB3403 said in Does anyone have a TightVNC guide for business use?:
@Jason We already have GPO's configured for permissions.
IT making a custom GPO that over rides the existing GP's for just this 1 user is insane. That is bad IT.
Make a group that does this.. Someone else is guaranteed to need it if one user does.
-
@Jason why (and I'm asking because I argued with myself) should a business change the entire security policy for a special case.
Where is this better than using what is proven to work.
-
@DustinB3403 said in Does anyone have a TightVNC guide for business use?:
@Jason why (and I'm asking because I argued with myself) should a business change the entire security policy for a special case.
Where is this better than using what is proven to work.
Aren't you changing it already. You are making a special case for this specific user by logging in and doing the change rather then having an automated, and somewhat accountable process doing it.
-
@coliver sadly yes....
And this is what I argued about before. Anyways this is a DDDDDD-RAAAAAIIIIIIILLLL!!!
I argued it, and was told to do it by the boss. so whatever.
-
Either way, if you're looking at a better remote access tool do a self-hosted Screenconnect trial. I think that is really what you are looking for here.
