Vector PC-Duo Installation Guide

PC-Duo Gateway Server Guide Release 12.1 August 2012 Vector Networks, Inc. 541 Tenth Street, Unit 123 Atlanta, GA 30318 (800) 330-5035 http:/

PC-Duo Gateway Server Guide 10 Gateway-managed connections No Yes Yes Firewall-friendly connections No Yes Yes Terminal services connections No Yes Y

PC-Duo Gateway Server Guide 100 In the Data Services Security tab, the following tasks can be performed:  Click Add to add a user or group fo

Gateway Configuration 101 In the Permissions tab of the Advanced Security Settings window, select an entry for which you want to assign advanced pe

PC-Duo Gateway Server Guide 102 Access control and security permissions for PC-Duo Gateway settings can be granted from the Settings Security tab of

Gateway Configuration 103 In the Permissions tab of the Advanced Security Settings window, select an entry for which you want to assign advanced p

PC-Duo Gateway Server Guide 104  View Protocols: Determines if you can view settings on the Protocols tab.  Modify Protocols: Determines if you

Gateway Configuration 105 In the Operation Security tab, you can perform the following tasks:  Click Add to add a user or group for which you w

PC-Duo Gateway Server Guide 106  Edit Security: Includes permission to change Operation Security.  Special Permissions: Indicates a non-standar

Gateway Configuration 107 Gateway database to import a specific file of a recorded session. This can be accessed only by writing an application with

PC-Duo Gateway Server Guide 108 Managed Hosts PC-Duo Gateway Administrator can be used to manage and control access to managed Hosts that are listed

Gateway Configuration 109 Menu options The following section includes descriptions of commands available from the context menu when a Managed Host i

PC-Duo Overview 11 PC-Duo applications The PC-Duo remote desktop solutions include some or all of the following applications: PC-Duo Components PC-

PC-Duo Gateway Server Guide 110 LAN signal (based on its MAC address and last known IP address). If the Gateway doesn‘t think the Host is offline, th

Gateway Configuration 111 When you right-click a workstation in the All Hosts folder, you can select Move to Unmanaged Hosts if the workstation is

PC-Duo Gateway Server Guide 112  ―Session security for a group‖ to specify the security policy for all recordings made of Hosts in the selected gr

Gateway Configuration 113 To remove a group listed in the Managed Hosts folder, right-click the group and select Delete. Rename a group To rename a g

PC-Duo Gateway Server Guide 114 Set security permissions for a specific group by selecting the Group Security tab in the Properties window for that g

Gateway Configuration 115  Edit Security: Determines if PC-Duo Master user can change the security settings for the selected group.  Special Pe

PC-Duo Gateway Server Guide 116  Read Permissions: Determines if PC-Duo Master user can read permissions in the Group Security tab.  Change Per

Gateway Configuration 117  Click Add to add a user or group for which you will specify permissions.  Select a user or group that has permission

PC-Duo Gateway Server Guide 118 Each advanced permission is treated individually, click Allow or Deny for any of the following permissions:  V

Gateway Configuration 119  Clipboard Read: Determines if PC-Duo Master user can read the contents of the Host computer clipboard from the Remote C

PC-Duo Gateway Server Guide 12 PC-Duo Host PC-Duo Host runs as a Windows service on the machine on which it is installed, and supports bot

PC-Duo Gateway Server Guide 120 In the Session Security tab, the following tasks can be performed:  Click Add to add a user or group for which

Gateway Configuration 121 In the Permissions tab of the Advanced Security Settings window, select a user or group of users for which you want to assi

PC-Duo Gateway Server Guide 122  Take Ownership: Determines if PC-Duo Master user can take ownership of permissions in the Session Security tab aw

Gateway Configuration 123 To view the properties of any Host in a group, double-click on any Host listed in the group to bring up the Root Properties

PC-Duo Gateway Server Guide 124 pull up the context menu, and select Remove to remove the Host(s) from the group. The Gateway will still try to maint

Gateway Configuration 125 NOTE: The workstation’s Host key will be needed to connect to a Host through a PC-Duo Gateway from the PC-Duo Master c

PC-Duo Gateway Server Guide 126 In the Host Security tab, the following tasks can be performed:  Click Add to add a user or group for which you

Gateway Configuration 127  Special Permissions: Indicates a non-standard grouping of permissions. Click Advanced to specify special permissions

PC-Duo Gateway Server Guide 128  File Transfer Read: Determines if PC-Duo Master user can transfer a file from the Host to the local computer. 

Gateway Configuration 129 Click Advanced to view special permissions and advanced settings; the Advanced Security Settings window will appear. In

PC-Duo Overview 13 PC-Duo Terminal Services Host PC-Duo Terminal Services Host is a server-side version of the PC-Duo Host designed to supp

PC-Duo Gateway Server Guide 130  Visible: Determines if PC-Duo Master user can see this Host. Some Hosts may not otherwise be visible to PC-Duo

Gateway Configuration 131  Chat: Determines if a PC-Duo Master user can be added to a private chat room including the PC-Duo Host user, and any ot

PC-Duo Gateway Server Guide 132 1 The user-specific security policy is applied first. 2 The group security policy for any group to which the user

Gateway Configuration 133 In the Session Security tab, the following tasks can be performed:  Click Add to add a user or group for which you wi

PC-Duo Gateway Server Guide 134 In the Permissions tab of the Advanced Security Settings window, select a user or group of users for which you want t

Gateway Configuration 135  Take Ownership: Determines if PC-Duo Master user can take ownership of permissions in the Session Security tab away fro

PC-Duo Gateway Server Guide 136  Start Time - Displays the time the recording began.  Duration - Displays the length of the recording.  W

Gateway Configuration 137 Groups View all of the groups to which a managed Host belongs from the Groups tab on the Properties window for that Host.

PC-Duo Gateway Server Guide 138 Terminal Services group A group called "Terminal Services on <ServerName>" appears when Hosts running

Gateway Configuration 139 In the example above, there is one VDI Host called ―MAPLE_VDI‖ reporting to the Gateway. Note: If there are any complete

PC-Duo Gateway Server Guide 14 PC-Duo VDI Host PC-Duo Virtual Desktop Image Host is a special version of the PC-Duo Host designed to suppor

PC-Duo Gateway Server Guide 140 View statistics of the PC-Duo Gateway by connecting to either of these virtual Hosts from your Master:  "G

Gateway Configuration 141 Gateway Server Performance Gateway Server Performance Monitor provides some process-specific statistics when you connect

PC-Duo Gateway Server Guide 142

Gateway Configuration 143 Unmanaged Hosts Unless the default settings for a PC-Duo Gateway are modified, all managed Hosts that are configured to rep

PC-Duo Gateway Server Guide 144 Active Status View the status of the following types of active operations in the Active Status folder:  ―Active

Gateway Configuration 145 This folder shows a list of all the PC-Duo Master users with active remote desktop windows to Hosts open through the PC-Duo

PC-Duo Gateway Server Guide 146 Help Get help on PC-Duo Gateway Administrator in any of the following ways:  Select Help > Help on PC-Duo Ga

Gateway Event Messages Use this appendix as a reference to look up PC-Duo Gateway event messages that may appear in the System Event Viewer or PC-Duo

PC-Duo Gateway Server Guide 148 109 The PC-Duo Gateway Server could not start because an error ([ERROR]) occurred accessing the recording directory:

Gateway Event Messages 149 301 Gateway noted failure attempt to authenticate for Admin services from [ADDRESS] via [PROTOCOL] (error code:[ERROR]). 3

PC-Duo Overview 15 PC-Duo Master PC-Duo Master is a console application that technicians can use to establish remote support connections to

PC-Duo Gateway Server Guide 150 address [ADDRESS]. Connection [APPID] was denied input control of Host [STATION] ([WORKSTATIONID]) due to license lim

Gateway Event Messages 151 822 Connection [APPID] was denied access to Host [STATION] ([WORKSTATIONID]) for [SERVICE]. Required rights [RIGHTS]. Conn

PC-Duo Gateway Server Guide 152 [DURATION]. Connection was opened by [USERNAME] at address [ADDRESS]. 850 Established recording file [FILENAME] for H

Gateway Event Messages 153 [USERNAME] at address [ADDRESS]. 1012 Connection [APPID] queried (read) admin connection to [WORKSTATIONID]. Connection wa

PC-Duo Gateway Server Guide 154 1022 Connection [APPID] disconnected Master [USERNAME] authenticated as [USERNAME] at [ADDRESS]. Connection was opene

Gateway Event Messages 155 1032 Host screen RESUMED (Station:[STATION], Protocol:[PROTOCOL], Address:[ADDRESS], WorkstationID:[WORKSTATIONID], Active

PC-Duo Gateway Server Guide 156 address [ADDRESS]. 2007 Connection [APPID] denied query of input control for Host [STATION] ([WORKSTATIONID]). Requir

Gateway Event Messages 157 2019 Connection [APPID] denied add Host [USERKEY or WORKSTATIONKEY] from Group [GROUPID]. Required rights [RIGHTS]. Connec

PC-Duo Gateway Server Guide 158 3005 Connection [APPID] denied write access to diagnostic logging settings. Required rights [RIGHTS]. Connection was

Gateway Event Messages 159 3018 Connection [APPID] started an immediate poll ([POLLID]) of the network. Connection was opened by [USERNAME] at addres

PC-Duo Gateway Server Guide 16 PC-Duo Gateway PC-Duo Gateway is an enterprise class server, which provides centralized administration, se

PC-Duo Gateway Server Guide 160 [USERNAME] at address [ADDRESS]. 3035 Connection [APPID] queried (read) a host grouping rule. Connection was opened b

Gateway Event Messages 161 5004 Connection [APPID] modified SessionSecurity for ([WORKSTATIONID] X [USERNAME]). Connection was opened by [USERNAME] a

PC-Duo Overview 17 PC-Duo Web Console PC-Duo Web Console is a web application that provides browser-based access to the PC-Duo Gateway Server for adm

PC-Duo Gateway Server Guide 18 PC-Duo Web Desktop The Web Desktop is an optional feature of the Web Console, which allows on-demand access to remote

PC-Duo Overview 19 PC-Duo Deployment Tool PC-Duo Deployment Tool is an easy-to-use software distribution utility that automates the deployment and in

PC-Duo Gateway Server Guide 2 Table of Contents PC-Duo overview ...

PC-Duo Gateway Server Guide 20 PC-Duo technologies PC-Duo remote desktop solutions utilize highly optimized technologies to deliver speed, performanc

PC-Duo Overview 21 PC-Duo services PC-Duo remote desktop solutions offer technicians a number of professional-quality services for investigating and

PC-Duo Gateway Server Guide 22 PC-Duo connection types PC-Duo services are performed over service connections between a PC-Duo Master (with appropria

PC-Duo Overview 23 By default, PC-Duo Master searches the network for Host computers when it starts up. Any Host computers it finds are listed on the

PC-Duo Gateway Server Guide 24 When a computer with PC-Duo Master establishes a connection to a computer with PC-Duo Host through a central server (i

PC-Duo Overview 25 Gateway (G)-managed connections from Master (M) to Host (H) Firewall-friendly connections When PC-Duo Master users need access to

PC-Duo Gateway Server Guide 26 automatically managed and added to the ―All Hosts‖ group. The TS Hosts are considered transient, since they go away wh

PC-Duo Overview 27 If the virtual desktop is discarded when the user logs out, the Host is effectively destroyed as well, but the Gateway doesn‘t k

PC-Duo Gateway Server Guide 28 PC-Duo security features One of the most valuable aspects of PC-Duo remote desktop solutions is the ability to create

PC-Duo Overview 29 ―Identity Authentication‖ ―Endpoint Authentication‖ Identity Authentication In general, this operation answers the following

PC-Duo Overview 3 Network protocols ...

PC-Duo Gateway Server Guide 30 Shared secret password: In the case that the Host does not share a domain relationship with the PC-Duo Gateway, or i

PC-Duo Overview 31 Gateway-managed (Master & Host are in same domain) Master-Gateway relationship Master Gateway Yes Gateway-Host relationshi

PC-Duo Gateway Server Guide 32 AES encryption (128-bit key) with SHA1 hash Triple-DES (3DES) encryption (192-bit key) with SHA1 hash RC4-compat

PC-Duo Overview 33 PC-Duo networking features PC-Duo remote desktop solutions support several standard transport protocols for computer-to-computer c

PC-Duo Gateway Server Guide 34 Explicit Wake-on-LAN: A network administrator, using either PC-Duo Master or PC-Duo Gateway Administrator, can attem

PC-Duo Overview 35 PC-Duo documentation and technical support Each of the four PC-Duo components has its own guide: PC-Duo Master Guide PC-

PC-Duo Gateway Server Guide 36 Enter your name: YourName Password: YourPassword File names and computer text can also be displayed in italics to ind

Gateway Installation PC-Duo Gateway can be installed on any computer that runs a supported operating system (OS) and meets the minimum requirements d

PC-Duo Gateway Server Guide 38 Requirements PC-Duo Gateway can be installed on any computer that runs a supported operating system (OS) and meets the

Gateway Installation 39 Screen recording hardware requirements vary according many factors, including the number of simultaneous active recording ses

PC-Duo Gateway Server Guide 4 Configure security through the Gateway ...

PC-Duo Gateway Server Guide 40 Configuration options PC-Duo Gateway Edition can be configured to operate in any of the following ways:  PC-Duo Gat

Gateway Installation 41 Installation notes PC-Duo Gateway has two main components:  PC-Duo Gateway, which runs as a service with no user interface

PC-Duo Gateway Server Guide 42 Gateway service accounts The PC-Duo Gateway service runs as a domain-based or local account, not as LocalSystem or ano

Gateway Installation 43 NOTE: At this first connection, the Host implicitly trusts the PC-Duo Gateway because it is on the known Gateways list. For e

PC-Duo Gateway Server Guide 44 SSL certificates PC-Duo Gateway Certificate Manager gets installed along with the PC-Duo Gateway and has options as sh

Gateway Installation 45  "View Certificate" Select a previously installed certificate To select a certificate previously installed in th

PC-Duo Gateway Server Guide 46 2 Enter the required information for the new certificate, and then click OK. Create a certificate request for a

Gateway Installation 47 1 Choose the radio button Install a certificate created by a certificate authority from a previous request and click Reque

PC-Duo Gateway Server Guide 48 View the details of the certificate on the Details tab: Select certain sets of detail by choosing one of the filt

Gateway Installation 49

PC-Duo Overview 5 PC-Duo overview Thank you for selecting PC-Duo remote desktop solutions. PC-Duo remote desktop solutions provide professional feat

PC-Duo Gateway Server Guide 50 Licensing If you downloaded this software from the Vector Networks web site on a 30-day trial basis and want to contin

Gateway Installation 51 Server, Hosts, Groups, security, etc. only Web Desktop is not enabled The license model is Managed Hosts, and the total

Gateway Operation Once PC-Duo Gateway, PC-Duo Host, and PC-Duo Master are properly configured, a PC-Duo Master user can follow these steps to connect

Gateway Operation 53 Start the Gateway Gateway has two main components:  PC-Duo Gateway runs as a service with no user interface. You can have mul

PC-Duo Gateway Server Guide 54 Run the Gateway Administrator PC-Duo Gateway Administrator window runs as a portion of an MMC console tree. PC-Duo Gat

Gateway Operation 55 Configure security through the Gateway PC-Duo Gateway has six different areas of security.  Use ―Gateway Security‖ to configu

PC-Duo Gateway Server Guide 56 Configure the Gateway Follow this procedure to set up and configure PC-Duo Gateway in your network. Each step provides

Gateway Operation 57 computers to which you assign the same access and control policy for one or more users.  Assign the access and control rights

Gateway Configuration This section explains each of the components of PC-Duo Gateway that can be configured using the PC-Duo Gateway Administrator.

Gateway Configuration 59 Remote Control Gateway servers When you start PC-Duo Gateway Administrator, the list of currently configured PC-Duo Gateways

PC-Duo Gateway Server Guide 6 What’s New in PC-Duo 12.1 PC-Duo 12.1 introduces the following new features and capabilities: “Click Once” Web Deskto

PC-Duo Gateway Server Guide 60 Using the Find Gateway Wizard, you can locate a PC-Duo Gateway on your network and optionally configure the credentia

Gateway Configuration 61 When the PC-Duo Gateway Administrator connects to a PC-Duo Gateway, it establishes a connection to it. To view and/or edit t

PC-Duo Gateway Server Guide 62 The Connection tab lets you view and/or edit the following parameters of the connection configuration settings: 

Gateway Configuration 63  Select Use the following username and password to change the credentials used to connect. With this option, you can chec

PC-Duo Gateway Server Guide 64 Gateway Server Settings From Gateway Server Settings, the following setting can be viewed and/or edited:  "Gen

Gateway Configuration 65  ―Licenses‖ - to view and add licenses for Gateway.  ―Network‖ - to view and edit network polling ranges.  ―Groupin

PC-Duo Gateway Server Guide 66 The following options can be set in the General tab: Setting Description Gateway station name View/edit the n

Gateway Configuration 67 User-based Host management Choose this option to select hosts for management according to logged-in user Enable management

PC-Duo Gateway Server Guide 68 Auditing tab The PC-Duo Gateway auditing feature creates log entries for the following events:  PC-Duo Gateway star

Gateway Configuration 69 5 Severity Number indicating the severity of the event: • 0 = Event Log Success • 1 = Event Log Information • 2 = Even

PC-Duo Overview 7  Windows Server 2008 R2 support: PC-Duo 11.6 provides full support (remote access, remote control, remote management) for Window

PC-Duo Gateway Server Guide 70 13-17 TargetInfo1 - TargetInfo5 Five columns that contain Target specific information, usually a 64 or 128-bit key, fo

Gateway Configuration 71 Logging options can be configured from the Auditing tab of the General Settings Properties window:  If you do not want

PC-Duo Gateway Server Guide 72 hours, once daily, or once weekly (default value). If you set this parameter to once weekly, the rollover will occur a

Gateway Configuration 73 If you set the Automatically start a new log file field to once weekly, the log files are named as follows: Audit Log File

PC-Duo Gateway Server Guide 74 From the Port drop-down list box, type the port or select the standard port (default), and then check the Enabled c

Gateway Configuration 75 Address Restrictions For the TCP/IP or SSL protocol, click Host to configure address restrictions on connections to Host

PC-Duo Gateway Server Guide 76 If you are using SSL, you can also click the View Cert button to see the currently installed certificate; see the Gate

Gateway Configuration 77 Encryption tab Encryption options can be enabled under the Encryption tab of the General Settings Properties window. Se

PC-Duo Gateway Server Guide 78 encryption key length (256-, 192- or 128-bit), and hashing algorithm (SHA1). Use the Up and Down keys to change the or

Gateway Configuration 79 attempt to access a Host or play a recording on it is delayed until the server finishes compacting. To set the Periodic Task

PC-Duo Gateway Server Guide 8 the other available keyboard combinations to remote computer (see PC-Duo Master Guide for more information).  Host-b

PC-Duo Gateway Server Guide 80  According to an Advanced schedule - Specify the most specific dates and times by typing comma-separated value

Gateway Configuration 81  Set of Hours in the day - Acceptable values are 0 to 23. For example, the values 0, 6, 12, 18 indicate 12 AM, 6 AM, 12 P

PC-Duo Gateway Server Guide 82 Use the Recordings tab of the General Settings Properties window to specify the following parameters:  The director

Gateway Configuration 83 complete picture of the Host screen. The more checkpoints you have within a recording, the quicker it is to locate a particu

PC-Duo Gateway Server Guide 84 Each "user mode profile‖ consists of the following information:  Description string  Image type (enume

Gateway Configuration 85 Bandwidth Description High Quality Medium Medium-Low (for screen recording) Low (for screen recording) Image Type Hextile He

PC-Duo Gateway Server Guide 86 Group specifically for terminal services session recordings). A Terminal Services instance license slot will automatic

Gateway Configuration 87 A ―user‖ is uniquely defined by the following parameters:  Windows account credentials  Local machine  Bro

PC-Duo Gateway Server Guide 88 . Incremental Licenses In each license model, the licensed Gateway capacity can be increased by adding one or more

Gateway Configuration 89 The default list of local network address ranges consists of a few well-known private address ranges. The current list of lo

PC-Duo Overview 9 PC-Duo solutions Vector Networks provides three solutions for remote desktop support: PC-Duo Express Edition PC-Duo Express Edition

PC-Duo Gateway Server Guide 90  Select Single Computer (at one IPv4 address) and enter an IP address in the Address field.  Select Group of

Gateway Configuration 91 Custom Grouping Rules Below is a description of each of the custom rule types:  Add Active Directory Rule: Select the

PC-Duo Gateway Server Guide 92  Add IPv4 Address Rule: Specify an IPv4 address and the number of sequential addresses that should be searched a

Gateway Configuration 93 Generic Grouping Rules If no custom Grouping rules are specified, Hosts can be automatically assigned to a group according

PC-Duo Gateway Server Guide 94 Polling for Hosts PC-Duo Gateway can periodically search the network for computers running PC-Duo Host according to a

Gateway Configuration 95 Edit a polling schedule To edit a polling schedule, double-click the schedule in the Polling for Hosts folder. The Polling

PC-Duo Gateway Server Guide 96  Select Scan address range to poll for a set of Host computers by specifying a range of network IP addresses. To sp

Gateway Configuration 97  Select the number of times each day to repeat the polling schedule.  Select the frequency of repetition and starti

PC-Duo Gateway Server Guide 98 For more information about the type of data to enter, see According to an Advanced Schedule description. Run a po

Gateway Configuration 99 Gateway Security Users can be granted the right to access and administer Gateway Security under Gateway Server Settings in t