The Remote Control Policy option is available across all platforms and on the general policy page. A Remote Management Policy is activated for this policy package by selecting the check box on the Remote Management Policy. The Remote Management Policy is then activated for all users associated with the User Policy Package. The Remote Management Policy controls the features of the Remote Management subsystem that ships with the ZENworks for Desktops 4. The Remote Management system is comprised of two parts: Remote Management Session Manager, which makes the connection and is used by the administrator Remote Management Agents, which are installed on the user's workstation
The remote control agent is part of the full ZENworks management agent and is installed as part of the agent installation process. You can run SETUP.EXE in the public\zenworks folder or get the MSI version of this from the Novell Cool Solutions and update sites. The Remote Management system makes a peer-to-peer connection between the administrator's workstation and the remote workstation. You can do this using either the IPX or the TCP/IP protocol. In this policy, you can specify the preferred protocol for the connection. This protocol is attempted first, but if the connection cannot be made, the alternative protocol is used. Remote controlling a workstation via ZENworks for Desktops 4 also requires rights within the Workstation Object that represent the workstation wanting to be controlled. Without these rights, the administrator is denied access to the remote control subsystem. Both the session manager and the agents validate that the user has rights to remote control the workstation. You assign the remote control rights through the Remote Management Rights wizard, or in the Workstation object in the Remote Operators page. ZENworks for Desktops 4 added the capability to remote control via a password, without any workstation object in the tree. When launching remote control from the Tools menu of ConsoleOne, the dialog box that appears requires the IP address of the workstation and a password. This password must match the password entered by the user through the Security menu of the remote control agent (on the tray) of the workstation. The password use of remote control must be configured in the policy. Remote Management PageThe Remote Management page identifies the features that you want to be activated with the Remote Management system. The following sections describe configuration options available under each of the tabs of the Remote Management policy window. General TabThe first tab of the remote management panel allows you to set the following general system functions: Enable Diagnostics This allows the agent on the workstations to perform a diagnostics report. Select the workstation and then right-click and select Actions, Diagnostics of the menu. The Diagnostics utility performs some basic queries on the system and returns the information about the workstation. This information includes memory, environment, and processes running. Additionally, it would include NDS and Netware connection information, client information, network drives, and open file list, as well as printers, Network protocols, and network services active. You can also view the various event and error logs that have been recorded on that workstation. Enable Password-based Remote Management This field allows the operator to establish password-based remote management with the workstation. Terminate Session When Workstation User Logs In and Requires to Be Prompted for Permission Terminates any ongoing remote management session with the workstation when a new user, whose permission for starting a remote management session is required, logs in.
Control TabThe Control tab enables you to set the following remote control functions: Enable Remote Control When this option is enabled, the remote control subsystem can be activated. Without this setting, no one can remote control the workstations. Prompt User for Permission to Remote Control This option displays a dialog box on the user's machine when a remote control session is started. The user can accept or deny the remote control request. The dialog box tells the user who wants to remote control their machine and asks if this is approved. If the user denies the remote control session, the session is terminated and the administrator cannot remote control the workstation. Give User Audible Signal When Remote Controlled This option provides the user with a tone periodically while the remote control session is active. You can also set the number of seconds between each beep. Give User Visible Signal When Remote Controlled This option displays a dialog box on the user's desktop while the remote control session is active. The dialog box indicates that the workstation is being remote controlled and who is controlling the workstation. You can set the number of seconds that you want to have between flashing the name of the user who is initiating the remote control session. Allow Blanking User's Screen This option causes the screen on the remote desktop to be blank, preventing the user from seeing what the administrator is doing. When you enable the blanking of the screen, the keyboard and mouse are automatically locked. Allow Locking User's Keyboard and Mouse When the administrator remote controls the workstation the keyboard and the mouse on the remote workstation are deactivated. The user can move the mouse or keyboard, but they will not function and any input from them will be ignored.
View TabThe View tab enables the remote view functions. Remote view is the capability of the administrator to view the remote Windows screen of the target machine but not control the mouse or keyboard of the machine. Enable Remote View When this option is enabled, the remote view subsystem can be activated. Without this setting, no one can remote view the workstations. Prompt User for Permission to Remote View This option displays a dialog box on the user's machine when a remote view session is started. The user can accept or deny the remote view request. The dialog box notifies the user who it is that wants to remote view their machine and asks if this is approved. If the user denies the remote view session, the session is terminated and the administrator cannot remote view the workstation. Give User Audible Signal When Remote Viewed This option provides the user with a tone periodically while the remote view session is active. You can also set the number of seconds between each beep. Give User Visible Signal When Remote Viewed This option displays a dialog box on the user's desktop while the remote view session is active. The dialog box displays that the workstation is being remote viewed and who is viewing the workstation. You can set the number of seconds that you want to have between flashing the name of the user who is initiating the remote view session.
File Transfer TabThe File Transfer tab enables the file transfer system. This allows you to send files to the remote workstation. Enable File Transfer When this option is enabled, the file transfer subsystem can be activated. Without this setting, no one can send files to the workstations in question. Prompt User for Permission to Transfer Files This option displays a dialog box on the user's machine when a file transfer session is started. The user can accept or deny the file transfer request. Within this dialog box, the user is told who wants to perform the file transfer from his machine and asks if this is approved. If the user denies the file transfer session, the session is terminated and the administrator cannot send the files to the workstation.
Remote Execute TabThe Remote Execute tab describes the feature enabling of the remote execute system. This allows you to remotely execute a program on the remote workstation. The output of the program is not displayed on the administrative console. Enable Remote Execute Enables the administrator to execute applications or files on the remotely managed workstation. Prompt User for Permission to Remote Execute This option displays a dialog box on the user's machine when a remote execute session is started. The user can accept or deny the remote execute request. If the user denies the remote execution session, the session is terminated and the administrator cannot execute the program on the workstation.
NAT TabThe NAT tab allows you to enable remote management operations across a NAT network boundary. The following options are configurable for remote management operations across NAT: Accept Connections Across NAT This option enables the administrator to connect across NAT to perform remote management operations. Prompt User for Permission to Remote Execute This option displays a dialog box to be displayed on the user's machine identifying the remote connection across NAT request. The user can accept or deny the remote connection request. If the user denies the remote connection request, the connection is terminated.
|
