What you will need…..
- Download TightVNC MSI package (http://tightvnc.com/download.php)
- Download and Install ORCA tool (http://www.technipages.com/download-orca-msi-editor)
Creating the Transform File….
Open the TightVNC MSI package with orca
Click Transform >> New Transform
Find (Ctrl-F) and change these values as below
- SERVER_ADD_FIREWALL_EXCEPTION=1
- VIEWER_ADD_FIREWALL_EXCEPTION=1
- SERVER_ALLOW_SAS=1
- SET_USEVNCAUTHENTICATION=1
- VALUE_OF_USEVNCAUTHENTICATION=1
- SET_PASSWORD=1
- SET_USECONTROLAUTHENTICATION=1
- VALUE_OF_USECONTROLAUTHENTICATION=1
- SET_CONTROLPASSWORD=1
- VALUE_OF_REMOVEWALLPAPER=0
To set passwords for connection, and so the user doesn’t turn off VNC accidentally you will need to adjust 2 values.
- VALUE_OF_CONTROLPASSWORD
- VALUE_OF_PASSWORD
These options are in CustomAction table, under the target field.
Inputting your password, for this tutorial im going to use PasswOrd.
Go to Transform >> Generate Transform and save as a .mst file you will need the MSI and the MST file when we deploy VNC via group policy.
Creating a share and setting the appropriate permissions.
Next we need to set a shared folder across the network, one that every computer that is joined to the domain can access.
Be sure to put the MSI file and the MST file in this directory.
Finally, Creating GPO and Linking to OU’s for Software Deployment…
Now that we have our folder set up so that all computers on the domain can see it, and have access to the files inside its time to set up our GPO.
Since I have OUs set up for laptops and desktops that are on my network, I will link this GPO both OUs.
Open group policy Management, Expand the forest, expand domains, expand the domain you are wishing to push software.
Right Click Group Policy Objects and click NEW.
Name your GPO, I named mine VNC Install MSI.
right click the new GPO you created and click Edit.
Under Computer Configuration, expand Policies, Software Settings and right click on software installation Click New >> Package.
Browse to your folder via UNC path (do not browse via hard disk path this needs to be the network share path).
Open the MSI, and you will see another box saying Deploy Software, Click Advanced.
Click ok, Go to Modifications Tab and click ADD.
Open your transform file (the .MST file) that we created earlier in Orca.
You should see the network path in modifications here.
Click OK.
Close Group Policy Management Editor,
Now we need to link the group policy to the OUs that we want to deploy to.
Simply Right click the OU (laptops and desktops in my case) and Link an Existing GPO… and select your GPO.
Close Group Policy Management.
The best way to test this is to do a “gpupdate /force” in command prompt on a computer in the OU you set up to receive the software.
after the gpupdate /force it will ask you to restart the computer. When it comes back up, Tight VNC should be installed on this machine.
Note: if you are having problems pushing the MSI, then it may be helpful to consult the Event Viewer on the client machine you are testing with
Do it yourself 