Timothy: Several options you could consider:
1) Remote Administrator (aka RAdmin) from Famatech. www.famatech.com or www.radmin.com I've found it easy to use, reliable (on W2k and XP Pro) and inexpensive. For $39 (last time I checked - also has free 30 day eval), you get a license to install the software on 2 systems. One can act as a server, the other the client. Make students machine the client, the teacher machine the server, have client connect to server in view-only mode (lest student become teacher). You should be able to get this going in very little time. With respect to security, Famatech claims all data runs across encrypted channel(s), and that they've put a lot of thought into their security design. Has hooks back into user logins, can do some amount of address restricting. Take their security claims however you like - I personally have not found an independent review/analysis of their security implementation for comparison. For what it seems like you want to do and protect, RAdmin should work fine. 2) VNC tunneled through SSH VNC can be found at: www.uk.research.att.com/vnc/ There are numerous commercial SSH offerings, but if you install the Cygwin tools on your windows box, you can get the SSH client and server components for free. Cygwin distribution can be found at www.cygwin.com/ (BTW - nice thing about this set up is that you can tunnel just about anything through it. Actually, if you don't trust RAdmin, tunnel it too - works fine.) If you haven't spent a lot of time with SSH, a good reference is the O'Reilly book on SSH titled "SSH, The Secure Shell: The Definitive Guide". If you don't want to buy the book, try their new Safari online book offering, which is a cool and useful way to access great technical books. The O'Reilly site is at www.oreilly.com Security pros/cons of VNC/SSH have been discussed numerous times on this list, check security focus site for more info. I have not found either of these solutions to cause or propogate Trojan activity, nor would I guarantee they wouldn't. Also - I always combine their use with firewalls, av software, and reasonably sane admin and usage policies. Regards, - joseph ----- Original Message ----- From: "Timothy Hall" <[EMAIL PROTECTED]> To: ">" <@securityfocus.com <[EMAIL PROTECTED]> Sent: Monday, April 22, 2002 3:04 PM Subject: Secure Way of Remotely Viewing a Desktop... Hey Folks! I hope this forum is the right place to post this question... If not, sorry! Background: I'm a sys. admin. at a local high school and have the following situation... There is a student taking a computer programming class that has a vison disability. He has a school provided Win2K Pro laptop that has been locked down very tightly... This laptop was provided to him to make learning easier for him. However, there is one problem... In order for him to funtion effectively in class he will need to be able to see a remote display of what his teacher is doing on her PC (which is hooked up to an LCD projector) on the screen of his PC. Is there a secure way of accomplishing this feat without using any of a number of trojan horse programs? The network is Windows based instead of Novell, so ZENWorks is not an option... Thanks for any help you can give in this!!! T�M�TH� �H��K H���
