I don't know if I sent it to the list or the originator but here is my $.02 ..again:
^^^^^^^^^^^^^^SNIP1^^^^^^^^^^^^^^^^^^^^^^^^^ If you are running Windows 2000 or XP, you can enable the Windows Firewall on the incoming connection. Then you can setup VNC as a running service within the firewall. From there you can enable LOGGING. You can log SUCCESSFUL connections. So, any VNC connections, because they are defined in the firewall setup, should be logged in the specified Log file. That should do it! ^^^^^^^^^^^^^^SNIP1^^^^^^^^^^^^^^^^^^^^^^^^^ **************SNIP2*************************Thanks Jason, Do you know if the Windows Firewall will affect any other sort of network traffic? We use a proxy server, as well as Lotus Notes and a few web-enabled resources on our local intranet. I suppose the easiest thing for me to do would be to configure a test box and see what happens.... Thanks again! **************SNIP2************************* ^^^^^^^^^^^^^^SNIP3^^^^^^^^^^^^^^^^^^^^^^^^^ I would tend to think that it affects incoming traffic and leaves outgoing alone. I would define specific INCOMING traffic as a service in the Firewall. However, Lotus notes and the likes are outgoing requests to the server and should not be affected. But definitely try it on a test box. Also.. With the advent of Windows XP SP2, you should be able to do Firewall Administration via Group Policy. Not sure if you can set up Group Policy exception and logging rules, but check it out. http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/mangxpsp2 /mngwfw.mspx >From a quick glance, it looks like you can do LOGGING. Please let me know how it works out. Good Luck. ^^^^^^^^^^^^^^SNIP3^^^^^^^^^^^^^^^^^^^^^^^^^ -JMB -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Wall, John Sent: Wednesday, October 13, 2004 9:42 AM To: 'John'; Wall, John; [EMAIL PROTECTED] Subject: RE: How to track use of VNC John, I am using RealVnc V4 however I would have thought it was up to the operating system i.e. XP/NT to determine if it will log an event rather than VNC triggering it. I don't know but logic would say the trigger would be the event operating system. Wez what do you say ?? John -----Original Message----- From: John [mailto:[EMAIL PROTECTED] Sent: Wednesday, 13 October 2004 21:26 To: Wall, John; 'John'; [EMAIL PROTECTED] Subject: RE: How to track use of VNC Maybe it's because we're using TightVNC, maybe no Event Log entries are made.... are you using RealVNC? I haven't looked at TVNC vs RVNC in well over a year.... maybe I should look agin. At 09:04 AM 10/13/2004, Wall, John wrote: >Hi John, > >I am using XP PRO, I go via the Control Panel select Administrative >Tools, select Event Viewer, Select Applications and it appears there >under as Event >Viewer (local) and then and entry VNC double click it and the >information is >in it. I never set this computer up re Event Viewer so assume it is the >default mode. > >Can't help further than explained above for my XP PRO laptop. It does >display the incoming IP addressed when connecting and when >disconnecting. > >John > >-----Original Message----- >From: John [mailto:[EMAIL PROTECTED] >Sent: Wednesday, 13 October 2004 19:24 >To: [EMAIL PROTECTED] >Subject: RE: How to track use of VNC > >Regarding John Wall's reply about XP Event Log... > > >Where in the Event Log? I just searched thru one of my common XP Pro >machines which users connect to and there's nothing there.... I checked >all three area carefully, Application, Security & System. Do you mean >some other .Log file someplace? > > > >--__--__-- > >Message: 21 >From: "Wall, John" <[EMAIL PROTECTED]> >To: "'[EMAIL PROTECTED]'" <[EMAIL PROTECTED]>, [EMAIL PROTECTED] >Subject: RE: How to track use of VNC >Date: Wed, 13 Oct 2004 07:46:29 +0800 > >Hi Daniel, > >NT & XP have an event log that records the IP address that accessed via >VNC not sure about Win95 Win98 > >John >_______________________________________________ >VNC-List mailing list >[EMAIL PROTECTED] >To remove yourself from the list visit: >http://www.realvnc.com/mailman/listinfo/vnc-list _______________________________________________ VNC-List mailing list [EMAIL PROTECTED] To remove yourself from the list visit: http://www.realvnc.com/mailman/listinfo/vnc-list _______________________________________________ VNC-List mailing list [EMAIL PROTECTED] To remove yourself from the list visit: http://www.realvnc.com/mailman/listinfo/vnc-list
