PURPOSE: To show some of the settings that can be defined for the Dameware MRC Agents. Note that there are 2 Agents for Dameware. Dameware Mini Remote Control Agent is for Remote Control to Windows 9x to Windows 10 and Server 2000 to 2016. Dameware Remote Support 2.6 Agent is for Remote Support only. This agent allows the ability to take actions without a remote session. With Security increasing across LAN Networks to secure End Users, I have received a few requests on information on setting up Dameware to request permission prior to connecting to the End User. Note: This is written for Dameware v9 - v12 and should work for v7-v9, only the installation folder has changed. The Dameware agent was rewritten prior to 6.9 and options may be different. With this Configuration: End User will have to approve permission when connecting to the remote system. Ensure that only Administrators or specified local or AD Groups can use Dameware to remote in. Filter to Allow/Deny systems based on IP Address or IP Address Range Notify the end user on connection. Enable or disable File Transfer option to the and from the remote system Note: These configuration settings will create a registry file that you can then use when connecting through Dameware, or you can roll out via 3 options at the bottom. To setup the Agent Settings: Open the Dameware Mini Remote Control Application Close the Connect Popup , then under View> Default Host Properties . Select the Install Options Tab, select Configure . (uncheck Include Configuration File unless you want it to always be installed ) Under the Configure DWRCS.reg, select the Checkbox and then select Configure . I want all of my Admins to have Permission Required prior to Connection : Select the Additional Settings Tab. Select the Checkbox for "Permission Required" (the checkbox "also when Locked" applies to the remote system state. Can only be changed when Required is enabled) For Non-Admininstrators, select the Access Tab. Check Permission Required for these account types. Limit Access only to Administrator or Member Groups Select the Access Tab For Administrators only, select the "Allow only Administrators to connect". To limit additionally to only a few AD Security Groups, select Must be member of one of the following groups Select Add Enter in the local Group Name defined on the remote system Enter in the DomainName\ADGroupName Filter to allow/deny specified IP Addresses to connect to the Remote System Select IP Filter - IPv4 Only Select Enable Filter for Remote Control Connections Select Granted or Denied Access from the Host Systems Select Add and specify IP address, IP Address range, or use a wildcard for certain systems. Notify the Remote user on connection Select the Notify Dialog Tab Select Notify on Connection. Defaults will display a blue message window at the lower right of the remote system screen and include the AD Username Enable/Disable File Transfer Select Simple File Transfer (SFT) Tab Select/Deselect Enable Simple File Transfer (SFT) Lock/Logoff system when finished (Perfect for Virtual Environments) Select Additional Settings On Disconnect Logoff On Disconnect Lock Workstation. Limit DameWare Techs to connect only at certain times. Non-Administrators: Access Tab. Disconnect if at the Logon Desktop. Select Additional Settings Tab. Only allow connection when at Logon Desktop Finally Select Ok to update the DWRCS.reg file. DWRCS.reg Agent settings will be located in the Installation Directory Dameware Remote Support: Version 9-11: C:\Program Files (x86)\SolarWinds\DameWare Remote Support <Version Number> Version 12: C:\Program Files (x86)\SolarWinds\DameWare Remote Support DameWare Mini Remote Control Version 9-11: C:\Program Files (x86)\SolarWinds\DameWare Mini Remote Control <Version Number> x64 if 64 bit install. Version 12: C:\Program Files (x86)\SolarWinds\DameWare Mini Remote Control or C:\Program Files\SolarWinds\DameWare Mini Remote Control x64 How to pull your existing Agent Settings to modify into DameWare. Go into Regedit Go into [HKEY_LOCAL_MACHINE\Software\DameWare Development\Mini Remote Control Service] Right Click on Mini Remote Control Service> Export Save as DWRCS.reg How to publish the Agent settings to multiple systems Option 1 : Configure Agent settings from Dameware Mini Remote Control Place the DWRCS.reg into the install directory (above). In the Remote Connect Popup, connect to a new system without Dameware installed, or File > Install Service to just install without connecting. Select the Include Configuration File, you can edit the .reg file prior to sending to the Remote System on connection Option 2 : Push Dameware Agent settings registry file .reg via SMS, Group Policies, etc.. (Preferred and Deployed to all systems automatically) All Client Agent settings are stored in the Registry, you could just push out a .REG file to all your remote machines via any of your existing distribution. The Mini Remote Client Agent will see the changes in the Registry and automatically reconfigure itself using the new settings. Registry Key Location: [HKEY_LOCAL_MACHINE\Software\DameWare Development\Mini Remote Control Service] Note: If the DameWare Agent is not installed, or installed but not started on the remote machine, then at the time it starts up it will read this Registry key and configure itself accordingly. Option 3 : Update the connected Remote System with new Agent settings. (Connected Only) Place the DWRCS.reg into the install directory (above). Select File / Update Client Agent Select Include Configuration file, Select Yes. (System will disconnect and update the agent, then reconnect)

This discussion has been locked. The information referenced herein may be inaccurate due to age, software updates, or external references.

You can no longer post new replies to this discussion. If you have a similar question you can start a new discussion in this forum.

Dameware MRC Agent: Configuring Agent Security Connection Rules

sean.martinez over 11 years ago

PURPOSE: To show some of the settings that can be defined for the Dameware MRC Agents.

Note that there are 2 Agents for Dameware.

Dameware Mini Remote Control Agent is for Remote Control to Windows 9x to Windows 10 and Server 2000 to 2016.

Dameware Remote Support 2.6 Agent is for Remote Support only. This agent allows the ability to take actions without a remote session.

With Security increasing across LAN Networks to secure End Users, I have received a few requests on information on setting up Dameware to request permission prior to connecting to the End User.

Note: This is written for Dameware v9 - v12 and should work for v7-v9, only the installation folder has changed. The Dameware agent was rewritten prior to 6.9 and options may be different.

With this Configuration:

End User will have to approve permission when connecting to the remote system.
Ensure that only Administrators or specified local or AD Groups can use Dameware to remote in.
Filter to Allow/Deny systems based on IP Address or IP Address Range
Notify the end user on connection.
Enable or disable File Transfer option to the and from the remote system

Note: These configuration settings will create a registry file that you can then use when connecting through Dameware, or you can roll out via 3 options at the bottom.

To setup the Agent Settings:

Open the Dameware Mini Remote Control Application
Close the Connect Popup, then under View> Default Host Properties.
Select the Install Options Tab, select Configure. (uncheck Include Configuration File unless you want it to always be installed )
Under the Configure DWRCS.reg, select the Checkbox and then select Configure.
1. I want all of my Admins to have Permission Required prior to Connection:
  1. Select the Additional Settings Tab.
  2. Select the Checkbox for "Permission Required" (the checkbox "also when Locked" applies to the remote system state. Can only be changed when Required is enabled)
  3. For Non-Admininstrators, select the Access Tab. Check Permission Required for these account types.
2. Limit Access only to Administrator or Member Groups
  1. Select the Access Tab
  2. For Administrators only, select the "Allow only Administrators to connect".
  3. To limit additionally to only a few AD Security Groups, select Must be member of one of the following groups
    1. Select Add
    2. Enter in the local Group Name defined on the remote system
    3. Enter in the DomainName\ADGroupName
3. Filter to allow/deny specified IP Addresses to connect to the Remote System
  1. Select IP Filter - IPv4 Only
  2. Select Enable Filter for Remote Control Connections
  3. Select Granted or Denied Access from the Host Systems
  4. Select Add and specify IP address, IP Address range, or use a wildcard for certain systems.
4. Notify the Remote user on connection
  1. Select the Notify Dialog Tab
  2. Select Notify on Connection. Defaults will display a blue message window at the lower right of the remote system screen and include the AD Username
5. Enable/Disable File Transfer
  1. Select Simple File Transfer (SFT) Tab
  2. Select/Deselect Enable Simple File Transfer (SFT)
6. Lock/Logoff system when finished (Perfect for Virtual Environments)
  1. Select Additional Settings
    1. On Disconnect Logoff
    2. On Disconnect Lock Workstation.
7. Limit DameWare Techs to connect only at certain times.
  1. Non-Administrators: Access Tab.
    - Disconnect if at the Logon Desktop.
  2. Select Additional Settings Tab.
    - Only allow connection when at Logon Desktop

Finally Select Ok to update the DWRCS.reg file.

DWRCS.reg Agent settings will be located in the Installation Directory

Dameware Remote Support:

Version 9-11: C:\Program Files (x86)\SolarWinds\DameWare Remote Support <Version Number>

Version 12: C:\Program Files (x86)\SolarWinds\DameWare Remote Support

DameWare Mini Remote Control

Version 9-11: C:\Program Files (x86)\SolarWinds\DameWare Mini Remote Control <Version Number> x64 if 64 bit install.

Version 12: C:\Program Files (x86)\SolarWinds\DameWare Mini Remote Control or C:\Program Files\SolarWinds\DameWare Mini Remote Control x64

How to pull your existing Agent Settings to modify into DameWare.

Go into Regedit
Go into [HKEY_LOCAL_MACHINE\Software\DameWare Development\Mini Remote Control Service]
Right Click on Mini Remote Control Service> Export
Save as DWRCS.reg

How to publish the Agent settings to multiple systems

Option 1: Configure Agent settings from Dameware Mini Remote Control

- - Place the DWRCS.reg into the install directory (above).
  - In the Remote Connect Popup, connect to a new system without Dameware installed, or File > Install Service to just install without connecting.
  - Select the Include Configuration File, you can edit the .reg file prior to sending to the Remote System on connection

Option 2: Push Dameware Agent settings registry file .reg via SMS, Group Policies, etc.. (Preferred and Deployed to all systems automatically)

- - All Client Agent settings are stored in the Registry, you could just push out a .REG file to all your remote machines via any of your existing distribution. The Mini Remote Client Agent will see the changes in the Registry and automatically reconfigure itself using the new settings.
  - Registry Key Location: [HKEY_LOCAL_MACHINE\Software\DameWare Development\Mini Remote Control Service]

Note: If the DameWare Agent is not installed, or installed but not started on the remote machine, then at the time it starts up it will read this Registry key and configure itself accordingly.

Option 3: Update the connected Remote System with new Agent settings. (Connected Only)

- - Place the DWRCS.reg into the install directory (above).
  - Select File / Update Client Agent
  - Select Include Configuration file, Select Yes.
  - (System will disconnect and update the agent, then reconnect)