Setup User Support (VNC)

ServerEngine already has the VNC Viewer so there no need to install UntraVNC Viewer.
On the remote host you have to install UltraVNC Server with encryption and Windows authentication.
Tip: Use the script to deploy UltraVNC Server with GPO (You may need to adjust it a bit).

Step 1: Download UltraVNC 1.6.4 #

Go to the official site: https://uvnc.com/downloads/ultravnc.html

Testet with UltraVNC 1.6.4 (Setup) EXE or MSI (make sure to pick the 64-bit installer).

Step 2: Run the Installer on the target host #

  1. Run the downloaded .exe or .msi file.
  2. When prompted, only choose UltraVNC Server.
  3. Select Register UltraVNC Server as a system service if you want it to start automatically with Windows.

Step 3: Configure UltraVNC Server Authentication #

  1. After installation, open UltraVNC Server from the Start Menu or system tray.
  2. Under Authentication, keep “MS Logon” enabled if you want seemles authentication.

Step 4: Enable Encryption (Required) #

  1. In the Server settings → DSM Plugin, select SecureVNCPlugin64.dsm.
    (Unencrypted VNC is not supported by ServerEngine)

Step 5: Open Firewall Ports #

  • By default, UltraVNC uses:
    • TCP 5900 → VNC connections
  • Make sure these ports are allowed in Windows Firewall or your network firewall.

Step 6: Start & Connect #

  1. Start UltraVNC Server (if not already running).
  2. Enable Use VNC (Remote Support) from ServerEngine.
  3. Your target host should be highlited green, click on the host to connect

Note: VNC also support to connect to existing RDP session. You may not be able to connect if the User is not logged in.

If you are lazy just run this PowerShell script: 🙂
(Allows all Domain Admins to connect)

# ===== CONFIGURATION =====
$DownloadURL = "https://uvnc.eu/download/1640/UltraVNC_1640_x64_Setup.exe"
$InstallerPath = "$env:TEMP\UltraVNC_1640_x64_Setup.exe"

$ConfigContent = @"
[ultravnc]
passwd=FB0B44D3653641D2CB
passwd2=FB0B44D3653641D2CB
[admin]
AllowUserSettingsWithPassword=0
FileTransferEnabled=1
FTUserImpersonation=0
BlankMonitorEnabled=1
BlankInputsOnly=0
DefaultScale=1
UseDSMPlugin=1
DSMPlugin=SecureVNCPlugin64.dsm
DSMPluginConfig=SecureVNC;0;0x00104001;
AuthHosts=
primary=1
secondary=0
SocketConnect=1
HTTPConnect=0
AutoPortSelect=0
PortNumber=5900
HTTPPortNumber=5800
InputsEnabled=1
LocalInputsDisabled=0
IdleTimeout=0
EnableJapInput=0
EnableUnicodeInput=1
EnableWin8Helper=0
QuerySetting=2
QueryTimeout=10
QueryDisableTime=1
QueryAccept=0
MaxViewerSetting=0
MaxViewers=128
Collabo=0
Frame=1
Notification=0
OSD=0
NotificationSelection=0
QueryIfNoLogon=1
LockSetting=0
RemoveWallpaper=1
RemoveEffects=0
RemoveFontSmoothing=0
DebugMode=0
Avilog=0
path=C:\Program Files\uvnc bvba\UltraVNC
DebugLevel=0
AllowLoopback=1
UseIpv6=0
LoopbackOnly=0
AllowShutdown=1
AllowProperties=1
AllowInjection=0
AllowEditClients=1
FileTransferTimeout=30
KeepAliveInterval=5
IdleInputTimeout=0
DisableTrayIcon=0
rdpmode=1
noscreensaver=0
Secure=1
MSLogonRequired=1
NewMSLogon=1
ReverseAuthRequired=1
ConnectPriority=1
AuthRequired=1
service_commandline=
accept_reject_mesg=Allow access to your computer?
cloudServer=
cloudEnabled=0
[poll]
TurboMode=1
PollUnderCursor=0
PollForeground=0
PollFullScreen=1
OnlyPollConsole=0
OnlyPollOnEvent=0
MaxCpu2=100
MaxFPS=25
EnableDriver=1
EnableHook=1
EnableVirtual=0
autocapt=1
[admin_auth]
group1=
group2=
group3=
locdom1=0
locdom2=0
locdom3=0
"@
$ACL = @'
allow 0x3 "..\Domain Admins"
'@

# ===== INSTALLATION =====
# 1. Download installer
Invoke-WebRequest -Uri $DownloadURL -OutFile $InstallerPath

# 2. Silent install (Service + Viewer)
Start-Process -FilePath "$env:TEMP\.\UltraVNC_1640_x64_Setup.exe" -ArgumentList "/VERYSILENT /NORESTART /Type=custom /Components=ultravnc_server /Tasks=installservice,startservice " -Wait

New-Item -Path "$env:ProgramData\UltraVNC" -ItemType Directory -Force

# 4. Deploy ultravnc.ini
$ConfigContent | Out-File -FilePath "$env:ProgramData\UltraVNC\ultravnc.ini" -Encoding ASCII -Force

# 5. Allow Grousp NEW-MsLogon
$ACL | Out-File -FilePath "$env:ProgramData\UltraVNC\allow_groups.acl" -Encoding ASCII -Force 2>&1
& "C:\Program Files\uvnc bvba\UltraVNC\MSLogonACL.exe" /i /o $env:ProgramData\UltraVNC\allow_groups.acl *>$null

# 6. Set firewall rule
New-NetFirewallRule -DisplayName "UltraVNC" -Direction Inbound -LocalPort 5900 -Protocol TCP -Action Allow

# ===== VERIFICATION =====
Write-Host "UltraVNC installed to: $InstallDir"
Write-Host "Config file deployed to: $env:ProgramData\UltraVNC\ultravnc.ini"

# Path to winvnc.exe
$winvnc = "C:\Program Files\uvnc bvba\UltraVNC\winvnc.exe"

# Path to Startup folder
$startup = [System.Environment]::GetFolderPath('Startup')

# Create shortcut
$WshShell = New-Object -ComObject WScript.Shell
$Shortcut = $WshShell.CreateShortcut("$startup\UltraVNC.lnk")
$Shortcut.TargetPath = $winvnc
$Shortcut.WorkingDirectory = (Split-Path $winvnc)
$Shortcut.Save()

Start-Process $winvnc

You’re welcome 😎👍