Easy Remote Access?

TinyApps asks: "How do Slashdot readers make remote connections through firewalls and NAT routers when assisting friends/family/customers? Reverse VNC connection are relatively easy to setup, but there is also the free LogMeIn and WebEx's new free service that startstarted, this week. Do you all have any other ideas?"

Comments

The old fashioned way...

[tibike77]

...use a (cell)phone and talk to the user in front of the other computer :P

A joke ? In some cases, yes (I meant the other user, har har).
Secure ? Depends on the user on the other end too ;)

Remote assistance

[Dr.Opveter]

On XP Remote assistance works well, you instruct them to go Start -> Help & Support -> Ask for assistance.
On other windows platforms i've been able to help people out with Netmeeting as well.
Otherwise VNC works fine..

Re:Remote assistance

[Cyberop5]

If you have Windows XP Professional, Microsoft Terminal Services is awesome, even over some slower connections. You can map the drives and printers to the computer you're on you can access any of your local files remotely or print remote files to a closer printer.

You can activate it by enabling remote desktop from the System Properties dialog and adding whichever users you want to be able to use it. It uses port 3389 so you'll need to open it with whatever firewall you're using. Any windows XP machine has the client by default. Simply go to start, run, and type mstsc. Linux has a client called rdesktop, although its not as great as Microsoft's last I checked. Other Windows versions can run the client off the XP install CD or downloadable from microsoft. I keep a copy on my thumb drive.

Also, netmeeting is still avaible on windows XP by running the program conf.exe. It'll start the netmeeting wizard then launch the program subsequently.

Re:Remote assistance

[Dr.Opveter]

You're quite right about the Terminal Services. I use them to admin some of my own Windows XP machines all the time. It does indeed feel speedy even on dial-up connections usually.

So if your friend/family/customer runs Windows XP Professional and you foresee future remote access to the machine will be needed, set up the Terminal Services for them. You don't even have to run it over port 3389 if that's a problem, you can configure it to run on any free port (except i think port 21 didn't work well for some reason, port 22, or a really high port number if you're worried about portscanners, works fine.
Many people in the friends/family cateogry have XP Home though, so then Remote Assistance or Netmeeting works like a charm.

Re:Remote assistance

[DA-MAN]

Go here:
http://sig9.com/articles/concurrent-remote- desktop

Get this file:
http://sig9.com/files/termserv.zip

Multiple Users for free on XP Pro!!!

Re:VNC

[jessecurry]

why not just turn off ask slashdot for yourself?

Trust

[tonsofpcs]

I use VNC. I do not trust those companies that offer the service of allowing you to log into your own pc remotely, using a password that is stored in their database. But hey, I'm paranoid in that I don't like big corporations having a way to get into my pc.

Re:Trust

[digitalchinky]

I use tightvnc (www.tightvnc.com) - works good over a modem connection.

Re:Trust

[X0563511]

Theres a big problem with VNC on windows.

The password is encrypted in the registry, but the problem is the key is always constant - you can simply do a google search and find the source.

Browse to the key, type it into the program, and it spits the VNC password out.

I don't think versions for other OSes have this issue, but i have tested it both with tightVNC and the latest VNC that you pay for.

All i need is read access to the registry and i got you. When your sitting down at the machine in question (and you know all the others would use the same password) its not hard to nab it.

So, if you use VNC at work on windows machines, look into this problem ASAP.

Run VNC over a VPN. (Acronyms!)

[Futurepower(R)]

Set up a VPN, which you need anyway to automate the transfer of files and do automated registry maintenance on Windows computers.

Then run VNC, such as TightVNC or UltraVNC over the VPN. If the VPN is secure, and remote network is not suspect, then VNC over the VPN is secure.

Beware, however, of Netgear's VPN routers. In my experience they are quirky and the technical support is very, very poor.

I have questions myself. What is the best way to form a VPN? What is the best VNC?

If you don't like the story, why comment?

[Anonymous Coward]

Why do angry people read and post comments to Slashdot stories they don't like?

Do these people complain about having to read the supermarket tabloids just because they are there?

TightVNC 1.3dev6 development version works fine.

[Futurepower(R)]

The article referenced by the Slashdot article, Reverse VNC connection, recommends TightVNC version 1.2.9. However, the TightVNC 1.3dev6 development version is a release candidate, and in my experience works fine.

Read the TightVNC Windows Documentation.

RADMIN always works

[jptechnical]

It isnt free but it ALWAYS works. You can even run it with only 2 files without an install. All you need is r_server.exe and adm(something).dll.

Myself and some other IT workers (different companies) use it constantly. One of the nice features is you can connect through one computer with the open port and bounce to the others in the local lan.

If you haven't tried it you should at least download and install it. It has a 30 day trial and is $35 per 2 computers. You can even install the serial number remotely... when expired it prompts you to enter the install key.

It is so popular it has been featured in worms to make zombies. So when it asks for a password... you better use one! famatech.com

MS Remote Desktop does not allow logging out?

[Futurepower(R)]

Another point: I understand that Microsoft's Remote Desktop does not allow you to log in as another user. Logging out breaks the RD connection. So, you can't log in as administrator, but must ask someone at the remote computer to do that, meaning they must sit there in boredom while you work.

VNC does not have that limitation.

Not many posts yet...

[windex82]

but no one seems to understand the question.

I'll try to make this as easy to understand as possible. Imagine this scenario...

Your |insert computer illiterate relation| needs help fixing something that VNC'ing into their box would easily fix. However, because you recommended that they put their windows box behind a firewall, which oddly enough they did, leaves you without the ability to easily connect to their machine without yet another couple steps, mainly setting up their firewall to allow you to connect to their machine.

How do some of you make the task of connecting through this firewall easy without the more daunting task of walking them through re-configuring their firewall to forward your request to their desktop. Since, if your walking them through that you could have probably just walked them through the other problem they had, like not knowing whether or not they wanted to continue or cancel what they had been doing. ;)

Re:Not many posts yet...

[Anonymous Coward]

sounds like the guy who locked his keys and his family inside his car...

SSH is your friend

[agm]

All of my remote access needs are satisfied using ssh. I use NXClient for GUI stuff (when a GUI is needed) and plain old ssh when a GUI is not needed (like when doing a remote "emerge world").

NXClient will do remote X (with or without a remote desktop), RDP, VNC all wit hvery good performance (as long as the latency of the link is low enough).

GoToMyPC

[freitasm]

Everyone talking about Remote Desktop, Terminal Services, VNC - but these solutions require a port open on the server and firewall.

LogMeIn and GoToMyPC only need an outgoing connection.

I use GoToMyPC, and with a keyphrase plus a one time password automatically generated.

Re:GoToMyPC

[wowbagger]

Everyone talking about Remote Desktop, Terminal Services, VNC - but these solutions require a port open on the server and firewall.

LogMeIn and GoToMyPC only need an outgoing connection.

Which they use to create the same result - a way an incoming connection can be established to your PC.

The only difference is that instead of opening a port on your firewall that you can pick (allowing you to use a non-standard port to raise the bar above the heads of the script kiddies), you use somebody else's computer to control your security.

Somebody you cannot audit.

Somebody who can screw up and comprimise your computer.

Somebody who is a high-profile high-value target for an attacker.

Were I a system administrator, I would null route all of these services at the firewall, and would log any attempt to access them from within my network and kill the connection of the PC that attempted them - then proceed to LART the user that did so in a fashion that would make the BOFH wince. Their main purpose is to allow stupid lusers to do an end-run around the "meeny stupid-head network admin who won't let me access MY computer" (because he is doing his job of maintaining network security).

Folks, any remote access solution involves cracking a hole in your firewall - bar none. You can either admit that to yourself and realise that you must take increased security precautions, or you can delude yourself and ride for a fall.

Not free, but...

[jbarr]

The Workstation edition of Remotely Anywhere is a VERY solid application. It costs about a hundred bucks, and is for Windows, but it offers excellent remote features including file transfer, remote computer management of resources and services, and full remote desktop control that in my opinion surpasses Microsoft Remote Desktop in speed and function. It uses either Active X, Java, or plain HTML for remoe access providing you maximum flexibility.

It is highly configurable and full of "geekiness" that should please most Windows-based /.ers. It also doesn't blank the host screen or lock the keyboard by default, though it can.

Also, it only works with one host per license, which can be expensive if you manage multiple hosts, but if you are looking for a remote access solution, this is a solid one. It's certainly not a cheap solution, but if you want rock-solid and secure access, Remotely Anywhere is worth a look.

Not affiliated with the company, just using Remotely Anywhere and certaily enjoying it.

UltraVNC - SC

[nafrance]

I had been searching for this for a long time myself, and found...
http://gotovnc.dynalias.com/

Totally recommended. Rudi there has made a package of UltraVNC that is a single exe, no-install system.

Basically, you download a zip file with some configs and bitmaps in, and customise them.
I got a free dyndns alias to use for this purpose.
Then you upload the files, and you get back a 160KB .exe that you can send you your client/brother/friend etc.

They run it, and it establishes a reverse-vnc connection to the server you specify. You have to be running vncviewer in listen mode, natch.

It works a treat, and even has optional encryption and file transfer. A brilliant tool.

I christened mine 'lifejacket' ;)

Re:Since we're being picky...

[bryanp]

Is 'well' better than 'good'?

'Well' is grammatically correct in that sentence. Good is not.

Free remote admin tools

[stinkydog]

I have my family connect their Windows machines directly to the Internet and to not bother with those pesky security updates. Within an hour, the internet installs all the remote access tools I need. Ftp servers, irc bots and keystroke loggers are just some of the handy tools that come through this way. I have to go, I just got an email about Snow White and I can't wait to check out the attachment.

SD