VNC User Guide - RealVNC

Chapter 7: Making Connections Secure
Managing users and groups in the authentication list
By default, VNC Server (Enterprise) and VNC Server (Personal) specify system authentication, which
means that a user must supply the credentials of a host computer user in order to connect to VNC Server.
Under certain circumstances, this may be the credentials of a host computer user with administrative
privileges.
If you want to use system authentication but do not want to publish the credentials of host computer users
with administrative privileges, you can add host computer users or groups with less sensitive credentials to
the VNC Server authentication list. (Alternatively, you could just choose a different authentication
mechanism; for more information, see Relaxing the authentication rules on page 104.)
To manage users and groups in the authentication list, open the VNC Server - Options dialog. More on this
dialog. On the Connections tab, click the Configure button. Providing Windows password (or platformspecific
equivalent) is selected in the Authentication dropdown, the Permissions for VNC Server dialog
opens:
To add a new host computer user or group, click the Add button. To remove an existing host computer user
or group, select it in the list and click the Remove button. Note that a user can supply the credentials of any
of the host computer users listed in Group or user names in order to connect to VNC Server.
Note: Artifacts in this dialog have slightly different names under UNIX/Linux and Mac OS X.
Note that when you add a new host computer user or group to the authentication list, a Default set of VNC
permissions is granted to connecting users supplying those credentials, even if this host computer user or
102 VNC User Guide