Frequently asked questions

Answers

Can I hide the taskbar icon created by the Windows VNC Server?

No, not at present in the standard versions. However, it is possible to stop the user closing the VNC Server or changing the VNC Server settings. Please refer to the documentation.

Can I make the VNC server listen on a different port number rather than 5900?

Yes. VNC Server for Windows Configuration allows the port numbers for VNC connections and for serving the Java Viewer to be configured. See the Connections Options section of the appropriate documentation. In Unix, you can specify it on the Xvnc or vncserver command-line.

Can I prevent people shutting down the Windows VNC Server, or changing the Windows VNC Server settings?

Yes, please refer to the documentation.

Can I remote the normal X:0 display of my Unix workstation?

Yes, please refer to the documentation.

Can I use VNC Viewer Free Edition to connect to VNC Server Personal or Enterprise Edition? (AKA Why do I get "No matching security types" errors)

VNC Viewer Free Edition does not support encryption or native password authentication (the "security types" mentioned in the error message). It is possible to configure VNC Server Enterprise or Personal Edition to allow connections from VNC Viewer Free Edition, although this is rarely necessary. VNC Viewer Enterprise and Personal Editions are free to use with a licensed VNC Server, so the best solution is to upgrade any users who are still using VNC Viewer Free Edition. If this is not possible then you can use a Java-enabled web browser to connect using VNC Viewer for Java.

If neither of the above solutions is appropriate, then you can configure VNC Server Enterprise or Personal Edition to allow connections from VNC Viewer Free Edition. To allow VNC Viewer Free Edition to connect, set the Encryption to either Prefer On or Prefer Off and the Authentication to either None or VNC Authentication. Your VNC session will not be encrypted if you use VNC Viewer Free Edition, but it will still be encrypted if you use VNC Viewer Enterprise or Personal Edition.

Can I use VNC to remotely control another computer across the internet?

Yes. VNC uses the TCP/IP protocol which is the networking standard of the Internet. You can use VNC over LANs, WANs, broadband ISP, and modem dialup ISP. The performance will vary with the amount of networking bandwidth you have, but there are special encodings and compression to make the most out of the bandwidth available. There is also an automatic linespeed detector, which will dynamically switch in the most suitable compression scheme for the connection you have. You should read the FAQ on security, and about using VNC through firewalls.

Ctrl-Alt-Del isn't getting through to the other computer

If you're running the VNC viewer under Windows, then the Ctrl-Alt-Del keypress may be intercepted by the operating system, and so the viewer program won't be able to detect it and pass it to a VNC Server. Go to the viewer's system menu, which you can access by pressing the "f8" key, left-clicking on the VNC icon at the top left of the viewer window, or right-clicking on the viewer entry in the taskbar. In this menu, you will find a "Send Ctrl-Alt-Del" option. Alternatively, you might find that Shift-Ctrl-Alt-Del works. AltGr-Del often works as well.

Under Unix, some window managers also intercept the Ctrl-Alt-Del keypress. The Unix VNC viewer also has a "Send Ctrl-Alt-Del" function which is accessible via the popup menu which you can pull down by pressing the "f8" key in the viewer window.

If you're running the VNC server as an application under Windows NT/2000/XP then it can only provide remote access to the display if a user is logged in and the workstation is not locked. In order to allow the Ctrl-Alt-Del keypress to work and be accessed even if no user is logged in or it is locked, you must run the VNC server as a system service.

If you're running the VNC server under Windows 95/98/ME then sending a remote Ctrl-Alt-Del function will not work at all. On these platforms, Ctrl-Alt-Del causes all programs, including the VNC server, to halt and bring up a task manager window.

How do I use VNC through my NAT router? (AKA Why do I get Connection timed out/Connection refused errors?)

Short answer: configure your router to forward port 5900 to the computer running VNC.
Long answer: we have a walkthrough for this common question.

How do I use VNC through my firewall?

Many organizations operate firewalls to reduce the risk of intrusion by malicious attackers via the Internet. These firewalls typically operate by only allowing connections in to machines in that organization on specific ports. Which ports are permitted access depends upon the network protocol that uses the port and the degree of security it provides.

There are two main methods for making VNC servers accessible through firewalls:

How much bandwidth does VNC require?

VNC automatically adapts to the available bandwidth, for example by using a lower colour level and greater compression over slower network connections, as well as sending updates only as quickly as the available network bandwidth allows. How much bandwidth VNC uses therefore depends upon the frame-rate & colour level required, and the activity being performed. Editing photos will take more bandwidth for the same level of performance than editing a text document, because photos are harder for VNC to compress to save bandwidth. A rough guide to how usable a given speed of network is is provided below:

The latency of the network also has an effect. For example, accessing a computer on the other side of the world will normally be noticably less responsive than one on the other side of the room, because of the time it takes to communicate even small amounts of data between the two.

Is VNC secure?

The only completely secure computer is one without a network. If a computer does have a network connection, then it is only as secure as its weakest point, whether this be the level of network encryption supported, the quality of users' passwords, or the internal security of the server computer.

VNC Enterprise and Personal Editions include support for strong encryption and authentication of VNC connections. VNC Enterprise Edition additionally supports native authentication against system user accounts. Both versions are specifically designed to be used across untrusted networks such as the Internet.

VNC Free Edition and older VNC 3 based systems support a simple challenge-response protocol used to verify a password of up to eight characters, supplied by the connecting user. While this avoids exposing the password to attackers as would be the case with pure plaintext protocols such as telnet, the rest of the session is unencrypted and so anything typed into the viewer passes "in the clear" to the server. VNC Free Edition is therefore suitable for use within a local network or secure VPN, but not for general use over untrusted networks, such as the Internet.

All versions of VNC since VNC 4.0 store sensitive information such as passwords with appropriate security permissions to avoid them being accessible to unauthorised users.

Is there a version for Mac OS X?

Yes, you can download VNC Enterprise Edition for Mac OS X here.

My virus checker says that VNC is a virus/adware/spamware. Is this true???

No. The VNC binaries we distribute are virus-checked before release, and are also signed on platforms that support signed binaries. VNC does not include nor install adware nor spyware of any kind.

The most likely cause of VNC being detected as a virus, adware or spyware is that your computer has become infected with a virus that attaches itself to existing files. Once you have used your virus checker to clean up your machine, you should be able to download and re-install VNC without further problems.

Some virus checkers do, however, wrongly report that VNC is a virus. In most cases this is caused by "heuristic" virus detection methods, while in others the virus checker's database is simply wrong!

Some virus checkers detect VNC correctly and classify it as a "Remote Access Tool" or similar, but present the information in such a way as to suggest that it is viral. This is not the case. If you were already aware of the presence of VNC on your system, you can usually ignore recommendations to remove it.

If in doubt, we recommend contacting your virus checker software vendor to verify that their software is not reporting a "false positive", and for advice on how to remove genuine viruses from your system.

What does 'Connection closed unexpectedly' mean?

When VNC Viewer shows this as an error message, it means that VNC Server closed the network connection at a time when the viewer was not expecting it to. This can happen, for example, when the viewer connects to the server and the server can't handle the connection for some reason.

Possible reasons for VNC Viewer showing this error message include:

Under Windows NT based platforms, including Windows XP, you can find out why VNC Server closed the connection by looking at the server's Application Event Log using the Event Viewer administrative tool. VNC Server will log information under the tag "WinVNC4" when running as a service. Log entries starting "Connections: closed" will include a brief description of the reason for the connection closing. If you don't see any such messages at all then VNC Server is not even receiving the connections - this can happen if a firewall is blocking them, or if you are connecting to the wrong computer.

On Unix platforms, VNC Server will normally log information to a ".log" file in the user's ".vnc" directory. As under Windows, log entries starting "Connections: closed" will include a brief description of the reason for the connection closing.

Why can I access my VNC Server even though I'm entering the wrong password?

The short answer is: You can't! However, when the classic VNC Authentication scheme is used to authentication the user, only the first eight characters of the user's password are checked. This means that the passwords "01234567hello" and "01234567world", for example, would be regarded by VNC Server as identical.

This is a limitation only when using VNC Free Edition or older VNC software. If both the Viewer and Server support encryption then the full password will be checked, even if encryption is not actually enabled.

Why can't I access my VNC Server even though I'm entering the right password?

There are a couple of possible causes of problems authenticating yourself to the VNC Server. The most basic of these is that you have not configured a VNC Authentication password - VNC Server won't let you connect without supplying a password unless the server is explicitly configured to use No Authentication.

If you have previously used VNC Free Edition, and have upgraded to a secure version, you may find that VNC Server rejects your password if it is longer than eight characters. You should find that you can connect successfully if you only enter the first eight characters of your password when prompted for it by VNC Viewer. You can enable your full length password by re-setting it, using the appropriate configuration tool for your platform.

Under Windows, VNC Server can only map keyboard input to the correct characters if all programs are using the same keyboard layout as the operating system. This can cause authentication problems if affected characters appear in the server's password.

Why can't my VNC viewer connect to my VNC server?

VNC requires TCP/IP network connectivity between the viewer and server computers. A simple test is to use the ping utility. If you can't ping from your viewer to your server, and vice-versa, than VNC will not work!

Why do I just get a grey desktop in my Unix VNC Server?

You should run the vncserver script to start a VNC server, rather than the Xvnc program directly. vncserver runs Xvnc with appropriate options and starts some X applications to be displayed in the VNC desktop. The applications it tries to start are specified in $HOME/.vnc/xstartup, which can be tailored to your requirements. The default setup is to run the 'twm' window manager and a single 'xterm' window. If these applications fail to run, then you will see a grey 'rootweave' desktop. The most likely reason applications fail to run is that they are not in your path. Any error messages from this startup should appear in $HOME/.vnc/host:display#.log. For further information see the vncserver manual page.

Why does VNC Viewer blue-screen my Windows PC when I use the scaling feature?

Some graphics card drivers include a bug in the scaling feature that causes them to crash the machine if certain ratios are used. This is mostly the case with older drivers and with older graphics cards.

© RealVNC Limited