Secure Open Source Easy Remote Administration for Windows

When you think of 'Open Source' software many experienced computer users that have used these packages find the documentation complex and incomplete. What is worse is very little support may appear to be available for these packages.

Open Source projects are in fact usually much more reliable, secure, and feasible for use (FREE) at your home or organization because of the scrutinization of all the top IT personalities who contribute to and use them.

First get read the article. Links at the bottom of the page will send you to the right web sites to get all the software you need. This process works with or without fire walls on either or both ends too.

Assumptions: You have a Win 2000/XP based system, and you are trying to call another system with a remote IP address (in this case we will assume it is static or doesn't change.) Don't get scared off if you don't quite understand this, since it is a painless process. NOTE: YOU SHOULD HAVE A HIGH SPEED INTERNET CONNECTION. Dial up won't cut it here. You installed the necessary software listed below on both computers. Use Windows-style installer versions if available. Also i presume you have administrator access

Configuration: OpenSSH Server For windows users bring up the console (MS-Dos prompt/command line) by going to run and typing "cmd" ("command" for win95 & win98) and pressing enter. Type the following commands as summing that you installed it in the default directory:

	cd C:Program FilesOpenSSHbin
	mkgroup -l >> ..etcgroup
	mkpasswd -l -u Administrator >> ..etcpasswd
	net start opensshd

Close the window.

Configuration: VNC Server/Client The server service should be set to automatically run. Set your password by Clicking on the VNC icon in your task tray in the lower right of your screen.

Note the other performance changes you should probability make in the image below.

Apply the changes and close.
Configuration: PuTTy Open up PuttyGen to generate a set of encrypted Keys. I recommend using SSH2RSA & 2048 bit encryption as in the picture. It is important (and fun) to move your mouse erratically over the center of the program erratically as it generates a key.

Now it is time to save your keys. Ideally you should keep them safe where others can't access them easily such as in your local profile "C:Documents and SettingsAdministrator". Alternatively you can be lax and store them in the program folder to avoid generating a lot of keys ("C:Program FilesPuTTY"). I recommend using a pass code that is the same as your users password that will have access to this service so you can remember it easily, but you can use anything.

Now it is time to install your keys into putty. Open Putty and choose "AUTH" in the left pane to install. Choose Browse and locate you private key.

Now choose "Tunnels" in the left pane and configure your tunnel. The IP address listed below (192.168.0.1) should correlate to that of the computer you will be calling from this one. Be sure to make the "localhost:1" or which ever you desire, you cant use duplicates and should appear "localhost:unused number". Press the "Add" button. And be sure it is listed in the forwarded ports section. Keep "5901" & "5900" as listed the same.

Now Click on Sessions and make the necessary changes. The IP address here should correlate to Your computers IP Address. You Can find these computers IP addresses by holding you mouse over the VNC icon in their task trays.

Now Free Secure VPN Connections are at your fingertips. All you have to do is load PuTTy on your remote computer. Load a saved session, and press "Open" (or double click it). A terminal Window will pop up (SSH2) and ask you for your username, then for your password.

Boom it will say you are connected! Now launch your VNC viewer and enter the local host (name of the) forwarded tunnel. In the example it is

localhost:1

Enter your password when prompted and boom your in business!

One of the best parts about using this combination of software is that the SSH Client (PuTTY) and the VNC Viewer can fit on a floppy disk with room to spare. Just be sure you write protect it and clear any temporary files you have when you leave the workstation you are using to be on the safe side. Only use this configuration on systems you trust. Many systems log keystrokes you make an it would create a huge security hole in this method. If you are having problems connecting check to be sure your fire wall is configured to allow the connection, and double check the IP addresses.

These links are the latest since June 6, 2003. You can always find this software by opening Google.com and typing the software package you are looking for.

• Get the latest version of VNC from:
  http://www.realvnc.com/
• Get the latest version of Openssh (server) from:
  http://lexa.mckenna.edu/sshwindows/
• Get the latest version of PuTTy from:
  http://www.chiark.greenend.org.uk/sgtatham/putty/
• Get the fire wall I used; Sygate Personal Fire wall from:
  http://smb.sygate.com/buy/download_buy.htm
• Get a presentation to describe key features (powerpoint):
  http://www.avitar.net/article/VPN_OpenSSH.ppt