Dameware MRC Agent: Configuring Agent Security Connection Rules

Version 6

    PURPOSE: To show some of the settings that can be defined for the Dameware MRC Agents.

     

    Note that there are 2 Agents for Dameware.

         Dameware Mini Remote Control Agent is for Remote Control to Windows 9x to Windows 10 and Server 2000 to 2016.

         Dameware Remote Support 2.6 Agent is for Remote Support only. This agent allows the ability to take actions without a remote session.

     

    With Security increasing across LAN Networks to secure End Users, I have received a few requests on information on setting up Dameware to request permission prior to connecting to the End User.

         Note: This is written for Dameware v9 - v12 and should work for v7-v9, only the installation folder has changed. The Dameware agent was rewritten prior to 6.9 and options may be different.

     

    With this Configuration:

    • End User will have to approve permission when connecting to the remote system.
    • Ensure that only Administrators or specified local or AD Groups can use Dameware to remote in.
    • Filter to Allow/Deny systems based on IP Address or IP Address Range
    • Notify the end user on connection.
    • Enable or disable File Transfer option to the and from the remote system

     

    Note: These configuration settings will create a registry file that you can then use when connecting through Dameware, or you can roll out via 3 options at the bottom.

     

    To setup the Agent Settings:

    1. Open the Dameware Mini Remote Control Application
    2. Please go to Remote Connect Popup, then select Settings.
    3. Select the Install Options Tab.
    4. Under the Configure DWRCS.reg, select the Checkbox and then select Configure.
      1. Permission Required to Connect:
        1. Select the Additional Settings Tab.
        2. Select the Checkbox for "Permission Required"
      2. Access only to Administrator or Member Groups
        1. Select the Access Tab
        2. For Administrators only, select the "Allow only Administrators to connect.
        3. For Member Groups, select Must be member of one of the following groups
          1. Select Add
          2. Enter in the local Group Name defined on the remote system
          3. Enter in the DomainName\ADGroupName
      3. Filter to allow/deny specified IP Addresses to connect to the Remote System
        1. Select IP Filter - IPv4 Only
        2. Select Enable Filter for Remote Control Connections
        3. Select Granted or Denied Access from the Host Systems
        4. Select Add and specify IP address, IP Address range, or use a wildcard for certain systems.
      4. Notify the Remote user on connection
        1. Select the Notify Dialog Tab
        2. Select Notify on Connection. Defaults will display a blue message window at the lower right of the remote system screen and include the AD Username
      5. Enable/Disable File Transfer
        1. Select Simple File Transfer (SFT) Tab
        2. Select or deselect Enable Simple File Transfer (SFT)
    5. Select Ok.

     

    DWRCS.reg agent setting locations:

     

    Dameware Remote Support:

         Version 9:      C:\Program Files (x86)\SolarWinds\DameWare Remote Support 9.0

         Version 10:    C:\Program Files (x86)\SolarWinds\DameWare Remote Support 10.0

        Version 11:    C:\Program Files (x86)\SolarWinds\DameWare Remote Support 11.0

        Version 12:    C:\Program Files (x86)\SolarWinds\DameWare Remote Support

     

    DameWare Mini Remote Control

        Version 9:      C:\Program Files (x86)\SolarWinds\DameWare Mini Remote Control 9.0       or      C:\Program Files\SolarWinds\DameWare Mini Remote Control 9.0 x64

         Version 10:    C:\Program Files (x86)\SolarWinds\DameWare Mini Remote Control 10.0     or      C:\Program Files\SolarWinds\DameWare Mini Remote Control 10.0 x64

         Version 11:    C:\Program Files (x86)\SolarWinds\DameWare Mini Remote Control 11.0     or      C:\Program Files\SolarWinds\DameWare Mini Remote Control 11.0 x64

        Version 12:    C:\Program Files (x86)\SolarWinds\DameWare Mini Remote Control             or      C:\Program Files\SolarWinds\DameWare Mini Remote Control x64

     

     

    How to publish the Agent settings to multiple systems

     

     

    Option 1: Configure Agent settings from Dameware Mini Remote Control

        • Place the DWRCS.reg into the install directory (above).
        • In the Remote Connect Popup, connect to a new system without Dameware installed, or File > Install Service to just install without connecting.
        • Select the Include Configuration File, you can edit the .reg file prior to sending

     

    Option 1: Push Dameware Agent settings registry file .reg via SMS, Group Policies, etc..

        • All Client Agent settings are stored in the Registry, you could just push out a .REG file to all your remote machines via any of your existing distribution. The Mini Remote Client Agent will see the changes in the Registry and automatically reconfigure itself using the new settings.
        • Registry Key Location: [HKLM\Software\DameWare Development\Mini Remote Control Service].
        •                 Note:  If the DameWare Agent is not installed, or installed but not started on the remote machine, then at the time it starts up it will read this Registry key and configure itself accordingly.

     

    Option 3: Update the Dameware Agent when already connected.

        • Place the DWRCS.reg into the install directory (above).
        • Select  File / Update Client Agent
        • Select Include Configuration file, Select Yes.
        • (System will disconnect and update the agent, then reconnect)