TightVNC for Windows: Installing from MSI Packages

TightVNC Version 2.5.2

Copyright 2012 GlavSoft LLC.
Starting with version 2.5, TightVNC installer o!es in the for! of "S# pa$ages. "S# for!at is
%se& 'y the stan&ar& (in&ows #nstaller an& allows installing software 'oth interatively an& in
a%to!ate& silent !o&e.
#nterative installation is si!ple an& &oes not &iffer fro! the stan&ar& way yo% install the software)
open the "S# file in *+plorer an& follow the onventional installation wi,ar&. -%to!ate&
installation nee&s !ore e+planation an& this is what this &o%!ent is a'o%t.
System Requirements
Syste! re.%ire!ents are si!ple. TightVNC r%ns on any type of (in&ows, starting with (in&ows
2000 with the latest Servie /a$. #t wor$s fine on (in&ows 0 an& even on 1eta version of
(in&ows 2 3as availa'le in s%!!er 20124. 1oth +25 3627'it4 an& +58 3587'it4 syste!s are
s%pporte&. TightVNC %ses very little &is$ spae an& an 'e %se& on syste!s with little !ain
!e!ory 39-"4 so we &on:t list any !ini!al reo!!en&ations ; it sho%l& fit any syste!, provi&e&
that (in&ows itself wor$s fine on it.
Choosing the Right Package
<irst of all, we nee& to say that there are two "S# pa$ages of TightVNC, 587'it an& 627'it. The file
na!es loo$ li$e this 3where 2.5.2 is a version n%!'er4)
tightvn72.5.27set%p762'it.!si
tightvn72.5.27set%p758'it.!si
Choose the one !athing yo%r syste! type. #f yo% r%n 627'it version of (in&ows 3+25
arhitet%re4, yo% an only install 627'it version of TightVNC. #f yo%r syste! is 587'it 3+58
arhitet%re4, yo% sho%l& install 587'it version. (hile 627'it version !ight wor$ on a 587'it
!ahine, that an res%lt in poor perfor!ane.
Installing Silently
To install an "S# pa$age silently fro! the o!!an& line, yo% sho%l& r%n the !sie+e tool with =i
an& =.%iet options 3where =i stan&s for install, =.%iet sets silent !o&e4. <or TightVNC, it wo%l& 'e a
goo& i&ea to a&& the =norestart option, to prevent re'ooting the syste! after installing the software.
#f everything is goo&, TightVNC installation sho%l& not re.%ire restart even if its previo%s version is
r%nning as a servie. The installer sho%l& %pgra&e the syste! orretly, 'y sh%tting &own ol&
servie, installing the files an& then starting new servie.
>ere is the si!plest e+a!ple of installing TightVNC in silent !o&e)
msiexec /i tightvnc-2.5.2-setup-64bit.msi /quiet /norestart
This o!!an& sho%l& install TightVNC with &efa%lt settings. >owever, "S# allows yo% to
%sto!i,e installation via so alle& "S# properties. The general synta+ is the following)
msiexec /i tightvnc-2.5.2-setup-64bit.msi /quiet /norestart
PROPERTY1=value1 PROPERTY2=value2 PROPERTY3=value3
There is a n%!'er of stan&ar& properties whih are s%pporte& 'y every pa$age 3e.g. -??L@C-L
for seleting o!ponents to 'e installe&4. -lso, eah pa$age an a&& its own "S# properties to
perfor! so!e pa$age7&epen&ent %sto!i,ation. #n ne+t setions, all TightVNC7speifi "S#
properties will 'e &o%!ente&.
Choosing the Components to Install
#f yo% wo%l& li$e to install a speifi o!ponent of TightVNC, %se the stan&ar& "S# property
na!e& -??L@C-L. The following three o!!an&s install only the server part, only the lient part
an& 'oth parts, orrespon&ingly)
msiexec /i tightvnc-2.5.2-setup-64bit.msi /quiet /norestart
ADDLOAL=!erver
msiexec /i tightvnc-2.5.2-setup-64bit.msi /quiet /norestart
ADDLOAL="ie#er
msiexec /i tightvnc-2.5.2-setup-64bit.msi /quiet /norestart
ADDLOAL=$!erver%"ie#er$
Properties, Part 1: Installation Options
-ll availa'le installation options liste& 'elow wor$ only in the silent !o&e 3with /.%iet option4.
/roperties whih are relate& to the TightVNC Viewer installation onfig%ration 'egin with
V#*(*9A prefi+, an& server installation properties 'egin with S*9V*9A prefi+. Notie that a
property will have an effet only if yo% install the o!ponent assoiate& with it.
Property Value
V#*(*9A-SS@C#-T*AVNCA*BT*NS#@N 0 ; &o not assoiate the C.vnC file e+tension with tvnviewer.e+e
1 ; assoiate the C.vnC file e+tension with tvnviewer.e+e
?efa%lt val%e) 1
S*9V*9A9*G#ST*9A-SAS*9V#C* 0 ; &o not register the server as a servie
1 ; register the server as a servie
?efa%lt val%e) 1
S*9V*9A-??A<#9*(-LLA*BC*/T#@N 0 ; &o not a&& firewall e+eption for the TightVNC Server
1 ; a&& firewall e+eption for the TightVNC Server
?efa%lt val%e) 1
V#*(*9A-??A<#9*(-LLA*BC*/T#@N 0 ; &o not a&& firewall e+eption for the TightVNC Viewer
1 ; a&& firewall e+eption for the TightVNC Viewer
?efa%lt val%e) 1
S*9V*9A-LL@(AS-S 0 ; &o not allow generating the CCtrlD-ltD?elC o!'ination 3also $nown as S-S4
progra!!atially
1 ; allow generating the CCtrlD-ltD?elC o!'ination progra!!atially
?efa%lt val%e) 1
Table 1: Installation options
Properties, Part 2: TightVC Ser!er Con"iguration #Ser!ice $o%e&
Eo% an preonfig%re yo%r TightVNC Server &%ring installation, 'y speifying onfig%ration7
relate& properties in the o!!an& line. This will affet servie !o&e only, it will not alter settings
of appliation7!o&e TightVNC Server.
*ah onfig%ration option 3e.g. -LL@(L@@/1-CF4 is ontrolle& via a pair of "S# properties
with &ifferent prefi+es 3S*TA-LL@(L@@/1-CF an& V-LG*A@<A-LL@(L@@/1-CF in this
e+a!ple4.
S*TAH properties ontrol if the respetive option sho%l& 'e !o&ifie&. They aept the following
val%es)
1 ; set the onfig%ration option 3yo% sho%l& provi&e the orrespon&ing V-LG*A@<AH
property4I
0 ; &o not hange the optionI
J1 ; re!ove the option fro! the server onfig%ration 3this sho%l& res%lt in resetting the
option to its &efa%lt val%e4.
V-LG*A@<AH properties provi&e at%al val%es for the onfig%ration options, '%t they ta$e effet
only if the orrespon&ing S*TAH properties have 'een set to 1. Th%s, to set eah in&ivi&%al
onfig%ration option XXX, yo% !%st speify 'oth S*TAXXX an& V-LG*A@<AXXX properties. <or
e+a!ple, to &isa'le ino!ing onnetions in yo%r newly installe& server, yo% sho%l& install
TightVNC with a o!!an& li$e this)
msiexec.exe /i tightvnc-2.5.2-setup-64bit.msi /quiet /norestart
!&'(A&)'*+,O--&'.O-!=/ "AL0&(O+(A&)'*+,O--&'.O-!=1
>ere is a list of all server options onfig%ra'le via "S# properties)
MSI Property Names Option Value (for VALUE_* Properties) onfi!uration "in#o$
S*TA-CC*/T>TT/C@NN*CT#@NS
V-LG*A@<A-CC*/T>TT/C@NN*CT#@NS
*na'les Kava Viewer 3on >TT/ onnetions4
0 ; &o not serve Kava Viewer to (e' lients
1 ; serve Kava Viewer to (e' lients
?efa%lt val%e) 1
Server=(e' -ess
S*TA-CC*/T9<1C@NN*CT#@NS
V-LG*A@<A-CC*/T9<1C@NN*CT#@NS
0 ; &o not aept ino!ing onnetions
1 ; aept ino!ing onnetions
?efa%lt val%e) 1
Server=#no!ing Viewer
Connetions
S*TA-LL@(L@@/1-CF
V-LG*A@<A-LL@(L@@/1-CF
0 ; &o not allow loop'a$ onnetions
1 ; allow loop'a$ onnetions
?efa%lt val%e) 0
-ess Control=Loop'a$
onnetions
S*TA-L(-ESS>-9*?
V-LG*A@<A-L(-ESS>-9*?
?efines server 'ehaviors on a new onnetion
0 ; allow non7share& onnetions
1 ; always treat new onnetions as share&
?efa%lt val%e) 0
#f 'oth -L(-ES>-9*? an& N*V*9S>-9*? are false
then the type of onnetion is &eter!ine& 'y lient settings
Note) this option is &esri'e& f%rther in the setion
C/roperties, /art 6) Server 'ehavior on new onnetionsC
-&!inistration=Session
Sharing
S*TA1L@CFL@C-L#N/GT
V-LG*A@<A1L@CFL@C-L#N/GT
0 ; allow loal inp%t &%ring lient sessions
1 ; 'lo$ loal inp%t &%ring lient sessions
?efa%lt val%e) 0
Server=(e' -ess
S*TA1L@CF9*"@T*#N/GT
V-LG*A@<A1L@CF9*"@T*#N/GT
0 ; allow re!ote inp%t events
1 ; 'lo$ re!ote inp%t events
?efa%lt val%e) 0
Server=#np%t >an&ling
S*TA?#SC@NN*CT-CT#@N
V-LG*A@<A?#SC@NN*CT-CT#@N
?efines an ation that will 'e perfor!e& when last lient
&isonnets)
0 ; &o nothing
1 ; lo$ &es$top
2 ; log off %rrent %ser
?efa%lt val%e) 0
-&!inistration=(hen Last
Client ?isonnets
S*TA?#SC@NN*CTCL#*NTS
V-LG*A@<A?#SC@NN*CTCL#*NTS
?efines server 'ehaviors on a new onnetion
0 ; &isonnet e+isting lients on new non7share& onnetion
1 ; 'lo$ new non7share& onnetion if so!eone is alrea&y
onnete&
?efa%lt val%e) 1
?#SC@NN*CTCL#*NTS &oes not wor$ if
-L(-ESS>-9*? is set to 1
Note) this option is &esri'e& f%rther in this setion
C/roperties, /art 6) Server 'ehavior on new onnetionsC
-&!inistration=Session
Sharing
MSI Property Names Option Value (for VALUE_* Properties) onfi!uration "in#o$
S*TA*BT9-/@9TS
V-LG*A@<A*BT9-/@9TS
"apping of a&&itional listening TC/ ports to selete& sreen
area
Type) string in for!at
CPORT:WIDTH+HEIGHTDLEFTDTOPC
<or e+a!ple)
C5L01)1220+1028D0D0,5L02)1220+1020D1220D0C
?efa%lt val%e) CC
*+tra ports=*+tra ports
S*TAG9-1T9-NS/-9*NT(#N?@(S
V-LG*A@<AG9-1T9-NS/-9*NT(#N?@(S
0 ; &o not gra' transparent win&ows
1 ; gra' transparent win&ows
?efa%lt val%e) 0
Server=Gp&ate >an&ling
S*TA>TT//@9T
V-LG*A@<A>TT//@9T
(e' aess port
Type) ?(@9?
?efa%lt val%e) 5200
Server=(e' -ess
S*TA#/-CC*SSC@NT9@L
V-LG*A@<A#/-CC*SSC@NT9@L
Set r%les for #/ ranges
Type) string in for!at CIP17IP2)M0N1N2OC, where)
0 ; allow onnetions
1 ; &eny onnetions
2 ; set .%ery ation
<or e+a!ple) C0.0.0.07255.255.255.255)2C ; set the .%ery
ation for all ino!ing onnetions.
?efa%lt val%e) CC
-ess Control=9%les
S*TAL@C-L#N/GT/9#@9#TE
V-LG*A@<AL@C-L#N/GT/9#@9#TE
0 ; allow re!ote inp%t on loal ativity
1 ; 'lo$ re!ote inp%t on loal ativity
?efa%lt val%e) 0
Server=#np%t >an&ling
S*TAL@C-L#N/GT/9#@9#TET#"*@GT
V-LG*A@<AL@C-L#N/GT/9#@9#TET#"*@GT
-llows to hange inativity ti!e 3in seon&s4 'elonge& with
the option C1lo$ re!ote inp%t on loal ativityC
Type) ?(@9?
?efa%lt val%e) 6
Server=#np%t >an&ling
S*TAL@GL*V*L
V-LG*A@<AL@GL*V*L
Log ver'osity level
Val%e range) 07L 30 ; &isa'le logging4
?efa%lt val%e) 0
-&!inistration=Logging
S*TAL@@/1-CF@NLE
V-LG*A@<AL@@/1-CF@NLE
0 ; allow
1 ; allow only loop'a$ onnetions
?efa%lt val%e) 0
-ess Control=Loop'a$
Connetions
S*TAN*V*9S>-9*?
V-LG*A@<AN*V*9S>-9*?
?efines server 'ehaviors on a new onnetion
0 ; allow share& onnetions
1 ; never treat new onnetion as share&
?efa%lt val%e) 0
#f 'oth -L(-ES>-9*? an& N*V*9S>-9*? are false
then the type of onnetion is &eter!ine& 'y the lient:s
setting
Note) this option is &esri'e& f%rther in this setion
C/roperties, /art 6) Server 'ehavior on new onnetionsC
-&!inistration=Session
Sharing
S*TA/@LL#NG#NT*9V-L
V-LG*A@<A/@LL#NG#NT*9V-L
Sreen polling yle ti!e 3in !illiseon&s4
Type) ?(@9?
?efa%lt val%e) 1000
Server=Gp&ate >an&ling
S*TAPG*9E-CC*/T@NT#"*@GT
V-LG*A@<APG*9E-CC*/T@NT#"*@GT
The setting is effetive only for #/7a&&resses with aess r%le
ation CP%ery loal %serC)
0 ; aept onnetion on ti!eo%t
1 ; reQet onnetion on ti!eo%t
?efa%lt val%e) 0
-ess Control=P%ery
Settings
S*TAPG*9ET#"*@GT
V-LG*A@<APG*9ET#"*@GT
P%ery ti!eo%t 3in seon&s4
Type) ?(@9?
?efa%lt val%e) 60
-ess Control=P%ery
Settings
S*TA9*"@V*(-LL/-/*9
V-LG*A@<A9*"@V*(-LL/-/*9
0 ; show wallpaper
1 ; hi&e &es$top wallpaper
?efa%lt val%e) 1
Server="isellaneo%s
S*TA9<1/@9T
V-LG*A@<AV-L*9<1/@9T
"ain server port
Type) ?(@9?
?efa%lt val%e) 5L00
Server=#no!ing Viewer
Connetions
S*TA9GNC@NT9@L#NT*9<-C*
V-LG*A@<A9GNC@NT9@L#NT*9<-C*
0 ; &o not show servie ion in the notifiation area
1 ; show servie ion in the notifiation area
?efa%lt val%e) 1
Server="isellaneo%s
MSI Property Names Option Value (for VALUE_* Properties) onfi!uration "in#o$
S*TAS-V*L@GT@-LLGS*9S/-T>
V-LG*A@<AS-V*L@GT@-LLGS*9S/-T>
0 ; !a$e log file private for eah %ser
1 ; !a$e log file availa'le to all %sers
?efa%lt val%e) 0
-&!inistration=Logging
Table 2: Server on!i"#ration options
Properties, Part ': Ser!er (eha!ior on e) Connections
Server 'ehavior an& onnetion types are ontrolle& 'y -L(-ES>-9*?, N*V*9S>-9*? an&
?#SC@NN*CTCL#*NTS options an& their o!'inations. The !eaningf%l o!'inations are shown
in the following ta'le.
AL"AS%A&E' NEVE&S%A&E' 'ISONNE(LIEN(S 'es)ription
0 0 0 1lo$ new non7share& onnetion if so!eone is alrea&y onnete&
0 0 1 ?isonnet e+isting lients on new non7share& onnetion
0 1 0 Never treat onnetions as share&, &isa'le new lients if there is one alrea&y
0 1 1 Never treat onnetions as share&, &isonnet e+isting lient on new
onnetions
1 0 0, 1 3not signifiant4 -lways treat onnetion as share&, a&& new lients an& $eep ol& onnetions
Table $: Server session s%arin" options
#n the first two e+a!ples the res%lting onnetion type is &eter!ine& 'y the lient setting 3the he$
'o+ C9e.%est share& sessionC in the CConnetion optionsC win&ow4. #n the re!aining ases that
lient setting is ignore&.
Properties, Part *: Pass)or% Protection #Ser!ice $o%e&
The server settings in the ta'le 2 wor$ in any installation !o&e, '%t there are so!e server options
onerne& with passwor& settings whih are effetive only &%ring silent installation.
To protet yo%r TightVNC Server, yo% an set passwor&s for ontrol interfae an& VNC lient
a%thentiation. Settings responsi'le for ena'ling a%thentiation are
GS*C@NT9@L-GT>*NT#C-T#@N an& GS*VNC-GT>*NT#C-T#@N.
#f GS*C@NT9@L-GT>*NT#C-T#@N option is set to 1, the server will re.%ire the a%thentiation
for !ost of ontrol operations. The GS*VNC-GT>*NT#C-T#@N option is responsi'le for
re.%iring VNC a%thentiation of ino!ing onnetions, whih an have view7only or f%ll7ontrol
aess type. Eo% an set passwor&s for 'oth of the!.
To a&& a passwor&, first yo% nee& to set C%se orrespon&ing a%thentiationC property to 1 an& then
a&& neessary passwor&s. -ll availa'le passwor& options are presente& in the ta'le 8. ?o not forget
to %se S*TA=V-LG*A@<A pair.
MSI Property Names Option Value (for VALUE_* Properties) onfi!uration "in#o$
S*TAGS*C@NT9@L-GT>*NT#C-T#@N
V-LG*A@<AGS*C@NT9@L-GT>*NT#C-T#@N
0 ; &o not protet ontrol operations with an a&!inistrative
passwor&
1 ; protet ontrol operations with an a&!inistrative
passwor&
?efa%lt val%e) 0
-&!inistration=Control
#nterfae
S*TAGS*VNC-GT>*NT#C-T#@N
V-LG*A@<AGS*VNC-GT>*NT#C-T#@N
0 ; &o not re.%ire VNC a%thentiation on esta'lishing
onnetion
1 ; re.%ire VNC a%thentiation on esta'lishing onnetion
?efa%lt val%e) 1
Server=#no!ing Viewer
Connetions
S*TAC@NT9@L/-SS(@9?
V-LG*A@<AC@NT9@L/-SS(@9?
/asswor& re.%ire& to r%n the server ontrol interfae
Type) string
?efa%lt val%e) CC
9e.%ires GS*C@NT9@L-GT>*NT#C-T#@N to 'e set to 1
R-&!inistration=Control
#nterfaeS/asswor&
MSI Property Names Option Value (for VALUE_* Properties) onfi!uration "in#o$
S*TA/-SS(@9?
V-LG*A@<A/-SS(@9?
/asswor& %se& as pri!ary for ino!ing onnetions
Type) string
?efa%lt val%e) CC
9e.%ires GS*VNC-GT>*NT#C-T#@N to 'e set to 1
RServer=#no!ing Viewer
ConnetionsS/ri!ary
passwor&
S*TAV#*(@NLE/-SS(@9?
V-LG*A@<AV#*(@NLE/-SS(@9?
/asswor& %se& as Cview7onlyC for ino!ing onnetions
Type) string
?efa%lt val%e) CC
9e.%ires GS*VNC-GT>*NT#C-T#@N to 'e set to 1
RServer=#no!ing Viewer
ConnetionSView7only
passwor&
Table &: Pass'or( protetion options
The speifi e+a!ples of setting passwor&s are onsi&ere& in the ne+t setion.
Sample Comman% +ine to Preset ,ll Pass)or%s
>ere we e+plore speifi e+a!ples of setting passwor&s with "S# properties.
To set a !ain passwor& for VNC a%thentiation, yo% sho%l& %se following o!!an&s)
!&'(0!&"-A0'2&-'.A'.O-=/
"AL0&(O+(0!&"-A0'2&-'.A'.O-=/
!&'()A!!3O*D=/
"AL0&(O+()A!!3O*D=PASS
-lso, yo% an set view7only passwor&)
!&'(".&3O-L4)A!!3O*D=/
"AL0&(O+(".&3O-L4)A!!3O*D=VIEWPASS
-n& if yo% wo%l& li$e to onfig%re the a&!inistrative passwor& 3protet the %ser interfae of the
TightVNC Server4, set the following val%es as well)
!&'(0!&O-'*OLA0'2&-'.A'.O-=/
"AL0&(O+(0!&O-'*OLA0'2&-'.A'.O-=/
!&'(O-'*OL)A!!3O*D=/
"AL0&(O+(O-'*OL)A!!3O*D=ADMNPASS
<inally, lets set all the passwor&s in one o!!an& line)
msiexec.exe /i tightvnc-2.5.2-setup-64bit.msi /quiet /norestart
!&'(0!&"-A0'2&-'.A'.O-=/
"AL0&(O+(0!&"-A0'2&-'.A'.O-=/
!&'()A!!3O*D=/
"AL0&(O+()A!!3O*D=mainpass
!&'(".&3O-L4)A!!3O*D=/
"AL0&(O+(".&3O-L4)A!!3O*D=viewpass
!&'(0!&O-'*OLA0'2&-'.A'.O-=/
"AL0&(O+(0!&O-'*OLA0'2&-'.A'.O-=/
!&'(O-'*OL)A!!3O*D=/
"AL0&(O+(O-'*OL)A!!3O*D=admpass