I have worked with DameWare since version 4, and so far it has been a fantastic and valuable support tool. My company has found a need to restrict file transfer for some of our computers, and this ADM helps to create a group policy to manage that setting (among others). This was written by DameWare, so all I'm doing is passing along knowledge.
CLASS MACHINE
CATEGORY "DameWare Mini Remote Control Service"
CATEGORY "General"
KEYNAME "SOFTWARE\DameWare Development\Mini Remote Control Service\Settings"
CATEGORY "Session..."
CATEGORY "Force"
POLICY "Force Encryption"
PART "Force General Data Encryption" CHECKBOX
VALUENAME "Force Encrypt Data"
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END PART
PART "Force Images Encryption" CHECKBOX
VALUENAME "Force Encrypt Images"
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END PART
PART "Force SFT Encryption" CHECKBOX
VALUENAME "Force Encrypt Files"
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END PART
END POLICY
END CATEGORY
POLICY "Allow Only Mode FIPS"
VALUENAME "Allow Only Mode FIPS"
END POLICY
END CATEGORY
POLICY "Authentication Types"
EXPLAIN "This value is additive.\n\nAllow Windows NT Challenge/Response = 2\nAllow Encrypted Windows Logon = 4\nAllow Smart Card Logon = 8\nAllow Invitation Logon = 16"
PART "Authentication Types" DROPDOWNLIST NOSORT REQUIRED
VALUENAME "Authentication Type"
ITEMLIST
NAME "2" VALUE NUMERIC 2
NAME "4" VALUE NUMERIC 4
NAME "6" VALUE NUMERIC 6
NAME "8" VALUE NUMERIC 8
NAME "10" VALUE NUMERIC 10
NAME "12" VALUE NUMERIC 12
NAME "14" VALUE NUMERIC 14
NAME "16" VALUE NUMERIC 16
NAME "18" VALUE NUMERIC 18
NAME "20" VALUE NUMERIC 20
NAME "22" VALUE NUMERIC 22
NAME "24" VALUE NUMERIC 24
NAME "26" VALUE NUMERIC 26
NAME "28" VALUE NUMERIC 28
NAME "30" VALUE NUMERIC 30
END ITEMLIST
END PART
PART "Must have 'Logon Locally Rights' (Requires 'Allow Encrypted Windows Logon')." CHECKBOX
VALUENAME "Must Have Logon Locally Rights with Windows Logon"
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END PART
END POLICY
POLICY "Port"
PART Port NUMERIC
VALUENAME "Port"
DEFAULT 6129
END PART
END POLICY
POLICY "Absolute Timeout"
PART "Absolute Timeout (Zero (0) indicates no timeout):" NUMERIC
VALUENAME "Absolute Timeout"
DEFAULT 0
MIN 0
END PART
END POLICY
END CATEGORY
CATEGORY "Access"
KEYNAME "SOFTWARE\DameWare Development\Mini Remote Control Service\Settings"
POLICY "Allow only Administrators to connect"
VALUENAME "Allow Only Administrators To Connect"
END POLICY
POLICY "Require 'Log on locally' privilege"
VALUENAME "Requires Logon Locally Privilege"
END POLICY
POLICY "Must be member of one of the following group(s)"
EXPLAIN "Examples: GroupName or DomainName\GroupName"
PART "Group Name" EDITTEXT
VALUENAME "Group 0"
END PART
PART "Group Name" EDITTEXT
VALUENAME "Group 1"
END PART
PART "Group Name" EDITTEXT
VALUENAME "Group 2"
END PART
PART "Group Name" EDITTEXT
VALUENAME "Group 3"
END PART
PART "Group Name" EDITTEXT
VALUENAME "Group 4"
END PART
END POLICY
POLICY "Permission required for these account types"
VALUENAME "Permission Required for non Admin"
END POLICY
POLICY "Disconnect if at the Logon Desktop"
VALUENAME "Permission Required for non Admin Disconnect If At Logon Desktop"
END POLICY
POLICY "View Only for these account types"
VALUENAME "Permission Required for non Admin Force View Only"
END POLICY
END CATEGORY
CATEGORY "Additional Settings"
KEYNAME "SOFTWARE\DameWare Development\Mini Remote Control Service\Settings"
CATEGORY "Logging"
POLICY "Enable Logging to this Host"
VALUENAME "Enable Reporting For This Host"
PART "Log Path:" EDITTEXT
VALUENAME "Log Path"
END PART
PART "Maximum log size (bytes):" NUMERIC
VALUENAME "Max Log Size"
DEFAULT 10240000
END PART
END POLICY
POLICY "Enable Remote Logging"
VALUENAME "Enable Log Reporting"
PART "Log Host:" EDITTEXT
VALUENAME "Log Host"
END PART
PART "Log Host Port Number" NUMERIC
VALUENAME "Log Host Port Number"
DEFAULT 6129
END PART
END POLICY
END CATEGORY
POLICY "Permission Required"
VALUENAME "Permission Required"
END POLICY
POLICY "Show Tray Icon"
PART "Show Tray Icon" DROPDOWNLIST NOSORT
VALUENAME "TrayIcon"
ITEMLIST
NAME "Never" VALUE NUMERIC 0
NAME "Always" VALUE NUMERIC 1 DEFAULT
NAME "Only when connected" VALUE NUMERIC 2
END ITEMLIST
END PART
END POLICY
POLICY "On Disconnect Logoff"
VALUENAME "On Disconnect Logoff Desktop"
PART "Force Application shutdown" CHECKBOX
VALUENAME "Force Applications Close"
VALUEON 1
VALUEOFF 0
END PART
END POLICY
POLICY "On Disconnect Lock Workstation (2000/XP)"
VALUENAME "On Disconnect Lock Workstation"
END POLICY
POLICY "Only allow connection when at Logon Desktop"
VALUENAME "Logon At Logon Desktop Only"
PART "Disconnect if timed out or console user logs on" CHECKBOX
VALUENAME "Logon At Logon Desktop Only Timeout"
DEFCHECKED
VALUEON 1
VALUEOFF 0
END PART
PART "Timeout (Seconds):" NUMERIC
VALUENAME "Logon At Logon Desktop Only Timeout Value"
DEFAULT 20
END PART
END POLICY
POLICY "Allow All Administrators To Have Control"
VALUENAME "Allow All Administrators To Have Control"
END POLICY
POLICY "Center Permission Dialog"
VALUENAME "Center Permission Dialog"
END POLICY
POLICY "Permission Dialog Set Focus on Decline"
VALUENAME "Permission Dialog Set Focus On Decline Button"
END POLICY
POLICY "Enable Disconnection Menu"
VALUENAME "Enable Disconnection Menu"
END POLICY
POLICY "Enable Settings Menu"
VALUENAME "Enable Settings Menu"
END POLICY
POLICY "Enable Invitation Menu"
VALUENAME "Enable Invitation Menu"
END POLICY
POLICY "Enable Connect To Client Menu"
VALUENAME "Enable Connect To Menu"
PART "Enable Connect To Client via Proxy" CHECKBOX
VALUENAME "Enable Connect To Menu Proxy"
VALUEON 1
VALUEOFF 0
END PART
END POLICY
POLICY "Disable RDP Session Switching"
VALUENAME "Disable Session Switching"
PART "Permission Required RDP" CHECKBOX
VALUENAME "Permission Required RDP"
END PART
END POLICY
POLICY "Disable Version Downgrade"
VALUENAME "Disable Version Downgrade"
END POLICY
END CATEGORY
CATEGORY "Notify Dialog"
KEYNAME "SOFTWARE\DameWare Development\Mini Remote Control Service\Settings"
POLICY "Notify on Connection"
VALUENAME "Notify On New Connection"
PART "Notify Dialog Timeout (Zero (0) indicates no timeout):" NUMERIC
VALUENAME "Notify On New Connection Timeout Value"
DEFAULT 15
MIN 0
END PART
PART "Play Sound on Notify" CHECKBOX
VALUENAME "No Notify Sound"
VALUEON 0
VALUEOFF 1
END PART
PART "Notify on Disconnection" CHECKBOX
VALUENAME "Notify On Disconnection"
VALUEON 1
VALUEOFF 0
END PART
PART "Notify Dialog Caption:" EDITTEXT
VALUENAME "Notify Dialog Caption"
DEFAULT "DameWare Mini Remote Control"
END PART
PART "Notify Dialog Text 1:" EDITTEXT
VALUENAME "Notify Dialog Text 1"
DEFAULT "MRC Notification"
END PART
PART "Notify Dialog Text 2 - Remote Control" EDITTEXT
VALUENAME "Notify Dialog Text 2 Remote Control"
DEFAULT "MRC Notification"
END PART
END POLICY
END CATEGORY
CATEGORY "Teredo - PNRP"
KEYNAME "SOFTWARE\DameWare Development\Mini Remote Control Service\PNRP"
POLICY "Register Local Common Peer PNRP Name"
VALUENAME "Use Common Local"
END POLICY
POLICY "Register Local Unique PNRP Name"
VALUENAME "Use Unique Local"
END POLICY
POLICY "Register Global PNRP Name"
VALUENAME "Use Global"
END POLICY
END CATEGORY
CATEGORY "Simple File Transfer (SFT)"
KEYNAME "SOFTWARE\DameWare Development\Mini Remote Control Service\Settings"
POLICY "Enable Simple File Transfer (SFT)"
VALUENAME "SFT: Enable Simple File Transfer"
PART "Upload Folder" EDITTEXT
VALUENAME "SFT: Upload Folder"
DEFAULT "%SYSTEMROOT%\dwrcs\Uploads\"
END PART
PART "Append Remote Host Name to Upload Folder" CHECKBOX
VALUENAME "SFT: Append Host Name"
END PART
END POLICY
END CATEGORY
CATEGORY "IP Filter - IPv4 Only"
KEYNAME "SOFTWARE\DameWare Development\Mini Remote Control Service\IP Filter"
POLICY "Enable Filter for Remote Control Connections"
VALUENAME "Enable Filter For Remote Control"
PART "Denied Access (Granted Access is default)" CHECKBOX
VALUENAME "Access Granted"
VALUEON 0
VALUEOFF 1
END PART
PART "Exception IP 0:" EDITTEXT
VALUENAME "IP 0"
END PART
PART "Exception IP 1:" EDITTEXT
VALUENAME "IP 1"
END PART
PART "Exception IP 2:" EDITTEXT
VALUENAME "IP 2"
END PART
PART "Exception IP 3:" EDITTEXT
VALUENAME "IP 3"
END PART
PART "Exception IP 4:" EDITTEXT
VALUENAME "IP 4"
END PART
PART "Exception IP 5:" EDITTEXT
VALUENAME "IP 5"
END PART
PART "Exception IP 6:" EDITTEXT
VALUENAME "IP 6"
END PART
PART "Exception IP 7:" EDITTEXT
VALUENAME "IP 7"
END PART
PART "Exception IP 8:" EDITTEXT
VALUENAME "IP 8"
END PART
PART "Exception IP 9:" EDITTEXT
VALUENAME "IP 9"
END PART
PART "Exception IP 10:" EDITTEXT
VALUENAME "IP 10"
END PART
END POLICY
END CATEGORY
CATEGORY "MRC Peer Discovery"
KEYNAME "SOFTWARE\DameWare Development\Mini Remote Control Service\Settings"
POLICY "Enable MRC Peer Discovery IPV4"
VALUENAME "MRC Peers Enable Ipv4"
END POLICY
POLICY "Enable MRC Peer Discovery IPV6"
EXPLAIN "This value is additive.\n\nScope Link-Local = 1\nScope Organization-Local = 2\nScope Global = 4"
PART "Scope" NUMERIC REQUIRED
VALUENAME "MRC Peers Scope"
MIN 1
MAX 7
END PART
END POLICY
END CATEGORY
END CATEGORY
Comments