Page 1 © Copyright 2012 Vector Networks Technologies and Proxy Networks, Inc. All rights reserved. PC-Duo is a trademark of Vector Networks Technologies, and PROXY is a trademark of Proxy Networks, Inc. Microsoft, Windows, Windows NT, Windows Server, and other Microsoft products referenced herein are either trademarks or registered trademarks of the Microsoft Corporation in the United States and other countries.
Page 2: Table Of Contents
PC-Duo Gateway Server Guide Table of Contents PC-Duo overview ............................5 What‘s New in PC-Duo 12.0 ........................6 What‘s New in PC-Duo 11.6 ........................6 What‘s New in PC-Duo 11.3 ........................7 What's New in PC-Duo 11.2 ........................7 PC-Duo solutions ............................8 PC-Duo Express ............................
Page 3 PC-Duo Overview Typographical conventions in documentation ..................29 Technical support options ........................30 Gateway Installation ............................ 31 Requirements ............................32 Operating system requirements ......................32 Hardware requirements ........................32 Installation requirements ........................32 Screen recording requirements ......................32 Network requirements .......................... 33 Configuration options ..........................
Page 4 PC-Duo Gateway Server Guide Connect/Disconnect ..........................54 About the product ..........................54 Web menu ............................54 View ..............................54 Export List ............................54 Gateway connection properties ......................54 Gateway Server Settings ......................... 58 General Settings ..........................58 Polling for Hosts ........................... 82 Gateway Security ..........................
Page 5: Pc-Duo Overview
NOTE: Before you use PC-Duo remote desktop solutions, you should be familiar with basic network concepts, such as protocols, encryption, IP addresses, ports, and subnets. To learn more about PC-Duo remote desktop solutions, see: ...
Page 6: What's New In Pc-Duo 12.0
 Screen Recording Playback via URL: PC-Duo 11.6 includes ability for Master to playback a PC-Duo screen recording from a standard web server over HTTP or HTTPS.  RDP compatibility: If a remote computer is hosting an active RDP session, PC-Duo...
Page 7: What's New In Pc-Duo 11.3
 Send keystroke button: PC-Duo 11.2 now provides a new toolbar button on the Master Remote Desktop Window, which can be configured to send Ctrl+Alt+Del or one of the other available keyboard combinations to remote computer (see PC-Duo Master Guide for more information).
Page 8: Pc-Duo Solutions
Vector Networks provides two solutions for remote desktop support: PC-Duo Express PC-Duo Express is an easy-to-use remote desktop solution that uses simple peer-to-peer connections between helpdesk technicians and end-user remote computers. It is ideally suited for smaller companies and workgroups in which the number of remote computers being supported is small and manageable.
Page 9: Pc-Duo Applications
PC-Duo Overview PC-Duo applications The PC-Duo remote desktop solutions include some or all of the following applications: PC-Duo PC-Duo Applications PC-Duo Express Enterprise PC-Duo Host PC-Duo Master PC-Duo Gateway PC-Duo Web Console PC-Duo Deployment Tool...
Page 10: Pc-Duo Host
PC-Duo Gateway Server Guide PC-Duo Host PC-Duo Host is an agent application that enables remote support connections to be established to the machine on which it runs. By installing PC-Duo Host on a computer in your network, you can: ...
Page 11: Pc-Duo Master
Use the clipboard transfer feature to transfer portions of text, bitmaps, and other objects between your Host and Master computers.  Use the PC-Duo file transfer feature to copy files between your Host and Master computers.  Use the PC-Duo remote printing feature to print locally from applications running on a remote computer.
Page 12: Pc-Duo Gateway
Host computers in your environment. With PC-Duo Gateway configured as the hub of your remote support network, you can:  Organize large numbers of Host computers into logical groups for easier access and management.
Page 13: Pc-Duo Web Console
PC-Duo Overview PC-Duo Web Console PC-Duo Web Console is a web application that provides browser-based access to the PC-Duo Gateway Server. With PC-Duo Web Console:  Administrators can access and edit all the configuration information on the Gateway Server, including Groups, Security, Permissions, etc. The Administrative web account can be used in conjunction with or instead of the standalone Gateway Administrator application.
Page 14: Pc-Duo Deployment Tool
PC-Duo applications to remote computers in your network. With PC-Duo Deployment Tool, you can:  Automatically deploy an image of PC-Duo Host, Master or Gateway to one or more computers or groups of computers in your network and avoid manual effort of going to each machine.
Page 15: Pc-Duo Technologies
PC-Duo Overview PC-Duo technologies PC-Duo remote desktop solutions utilize highly optimized technologies to deliver speed, performance and reliability, including:  Highly efficient screen capture algorithms. PC-Duo utilizes two kinds of screen capture technology:  Kernel-mode screen capture. This technology utilizes the PC-Duo mirror driver, which reproduces graphics drawing commands from the remote Host on the PC- Duo Master user‘s screen quickly and efficiently.
Page 16: Pc-Duo Services
Remote Printing: ability to print selected items from the remote machine to a printer attached to the technician‘s machine  Host Administration: ability to view and edit configuration settings of the PC-Duo Host installed on the remote machine  Remote Management: ability to generate inventory of hardware and software assets on remote machine, and to query and change certain system settings.
Page 17: Pc-Duo Connection Types
PC-Duo connections can be used to share an active RDP session in real-time. If PC-Duo Host is running on a desktop-class operating system (e.g. Windows XP or Vista), and there is an active/connected RDP session being hosted on that computer, then the Host will automatically capture and provide input control to that RDP session.
Page 18: Peer-To-Peer Connections
See "Send Wake-on-LAN Signal" in the PC-Duo Master Guide for more information. Peer-to-peer connections When a computer with PC-Duo Master establishes a direct connection to a computer with PC-Duo Host, the connection that is established is a peer-to-peer connection. By default, PC-Duo Master searches the network for Host computers when it starts up.
Page 19: Gateway-Managed Connections
 When you permit full access to a Host computer, the PC-Duo Master user can monitor all activity on the Host computer. In addition, PC-Duo Master users with full access rights can exercise complete control over that computer.
Page 20: Firewall-Friendly Connections
Windows Server before it is remoted to the end user device over the RDP or ICA display protocol. PC-Duo is able to do this by injecting a Host instance into each server-side TS session, which in turn captures and sends presentation information...
Page 21 Host called the "root" Host must be loaded on the TS server (a "root" Host is a standard Host with a special TS license key - see About tab in the PC-Duo Host Guide for more information); it will automatically spawn new Host instances every time a new TS session is created.
Page 22: Vnc Connections
Mac OS X operating system from Apple Computer, and is also available on many versions of the Linux operating system. When properly configured, technicians can use PC-Duo Master on Windows to connect to and take control of Mac and Linux computers running standard VNC server.
Page 23: Pc-Duo Security Features
PC-Duo Overview PC-Duo security features One of the most valuable aspects of PC-Duo remote desktop solutions is the ability to create and enforce fine-grained access control policies, and to easily modify them to reflect changes in your organization. PC-Duo security features include the following: ―Authentication‖...
Page 24 In general, this operation answers the following security question: How does the server know who the client is? A PC-Duo application acting as a server will not provide access or information to any PC-Duo application acting as a client until it can validate that client‘s identity.
Page 25 Host will have some measure of authentication when they are not in the same domain. If the Host belongs to the same domain as the PC-Duo Gateway, and the Host is able to reach a domain controller, the Host will prefer to do Windows authentication instead of shared secret password.
Page 26: Authorization
 Authorization to control the Host computer remotely Your credentials are established when you connect to a Host computer (or to a PC-Duo Gateway), and persist until the connection breaks. You can configure access and other rights directly on the Host computer for peer-to-peer connections. Alternatively, you can use the PC-Duo Gateway to enforce custom access rights policies on PC-Duo Master users, roles, or groups for Gateway-managed connections.
Page 27 RC4-compatible encryption (128-bit key) with MD5 hash NOTE: PC-Duo 5.10 applications and older support only RC4 encryption; thus, this would be the encrpytion option negotiated between a PC-Duo 5.20 or later application (e.g. PC-Duo Master) and PC-Duo 5.10 application (e.g. PC-Duo Host).
Page 28: Pc-Duo Networking Features
The PC-Duo Gateway now ships with a Gateway Certificate Manager to manage the creation and/or selection of a SSL security certificate for the PC-Duo Gateway. Network addressing schemas The PC-Duo UDP, TCP and SSL transport protocols support the use of either IPv4 (32- bit) or IPv6 (128-bit) addresses.
Page 29: Pc-Duo Documentation And Technical Support
PC-Duo Overview PC-Duo documentation and technical support Each of the four PC-Duo components has its own guide:  PC-Duo Master Guide  PC-Duo Host Guide  PC-Duo Gateway Server Guide  PC-Duo Web Console Operating Guide  PC-Duo Web Console Installation Guide ...
Page 30: Technical Support Options
Press C Technical support options If you have any problems installing or using the PC-Duo remote support products, information and support resources are available to help: This manual and the Release Notes may contain the information you need to solve your problem.
Page 31: Gateway Installation
Gateway Installation PC-Duo Gateway can be installed on any computer that runs a supported operating system (OS) and meets the minimum requirements described in this section.  "Requirements"  "Configuration options"  "Installation notes"  "Gateway service accounts"  "SSL certificates"...
Page 32: Requirements
PC-Duo Gateway can be installed on any computer that runs a supported operating system (OS) and meets the minimum requirements described in this section. NOTE: If you plan to use PC-Duo Host with PC-Duo Gateway, then install PC-Duo Host after you install PC-Duo Gateway Operating system requirements...
Page 33: Network Requirements
Also, note that one connection between Host and PC-Duo Gateway may support one or more simultaneous recordings.
Page 34: Configuration Options
PC-Duo Gateway Server Guide Configuration options PC-Duo Enterprise can be configured to operate in any of the following ways:  PC-Duo Gateway only: Require all remote control connections to pass through a central management server (PC-Duo Gateway). The PC-Duo Gateway functions as the hub of a network of connections to all the Host computers in your environment (―network...
Page 35: Installation Notes
Installation notes PC-Duo Gateway has two main components:  PC-Duo Gateway, which runs as a service with no user interface. Multiple PC-Duo Gateways can be installed in the network.  PC-Duo Gateway Administrator, which is used to configure one or more PC-Duo Gateways.
Page 36: Gateway Service Accounts
Host security settings (or some other Gateway account had to be created and added to the Host security settings). Now, as long as the PC-Duo Gateway is on the known list of PC-Duo Gateways on the Host‘s tab, the Host will automatically add that Gateway‘s...
Page 37 Gateways list. For even higher level of authentication, use SSL protocol with valid certificates to confirm the identity of the PC-Duo Gateway. On all subsequent connection attempts when the Host and PC-Duo Gateway are not in the same domain, the shared secret password will be presented and accepted for authentication (because it is known only to the Host and PC-Duo Gateway).
Page 38: Ssl Certificates
PC-Duo Gateway running on the local computer. The button is only enabled Connect if the Certificate Manager cannot connect to the PC-Duo Gateway running on the default port via the TCP protocol. To configure an SSL certificate, choose one of the following options under...
Page 39: Select A Previously Installed Certificate
Gateway Operation  "View Certificate" Select a previously installed certificate To select a certificate previously installed in the local computer certificate store: Choose the radio button Select a certificate previously installed in the local computer and click . The window appears as shown certificate store Request Select Certificate...
Page 40: Create A Certificate Request For A Certificate Authority
PC-Duo Gateway Server Guide Enter the required information for the new certificate, and then click Create a certificate request for a certificate authority To create a certificate request to be submitted to a certificate authority: Choose the radio button Create a certificate request to be submitted to a certificate and click .
Page 41: Remove Selected Certificate From Gateway
Enter private key password: Enter the password of the private key and press Remove selected certificate from Gateway To remove a certificate, click , and then Remove selected certificate from PC-Duo Gateway click Request View Certificate At any time while connected, click...
Page 42 SSL Certificate Install Certificate certificate in the certificate store or the PC-Duo Master user (Master-Gateway relationship) or PC-Duo Host user (Host-Gateway relationship when Host is outside domain of Gateway). If it goes into trusted roots, a valid certificate will allow that user to trust the SSL connection without getting a prompt in the future.
Page 43 Gateway Operation...
Page 44: Licensing
PC-Duo Gateway Server Guide Licensing If you downloaded this software from the Vector Networks web site on a 30-day trial basis and want to continue using the product, you may purchase it by contacting a preferred reseller, or by contacting Vector Networks directly. Your purchase provides an appropriate license key to use with Gateway.
Page 45: Add A License Key After Your Trial Period Expires
Add a license key after your trial period expires When the trial period expires, the PC-Duo Gateway continues to run, but refuses to make any connections except Gateway Administration connections. You can add a license key after the trial expires by connecting the Gateway Administrator to the PC-Duo Gateway and following the instructions above.
Page 46: Gateway Operation
Gateway Operation Once PC-Duo Gateway, PC-Duo Host, and PC-Duo Master are properly configured, a PC-Duo Master user can follow these steps to connect to a Host computer through a PC- Duo Gateway: 1 Select PC-Duo Start > All Programs > Vector Networks >...
Page 47: Start The Gateway
Gateway has two main components:  PC-Duo Gateway runs as a service with no user interface. You can have multiple PC- Duo Gateways on your network, each on their own computer. You cannot use a PC-Duo Gateway unless this service is running.
Page 48: Run The Gateway Administrator
PC-Duo Gateway Server Guide Run the Gateway Administrator PC-Duo Gateway Administrator window runs as a portion of an MMC console tree. PC-Duo Gateway console tree appears when you open the PC-Duo Gateway Administrator window. is listed as the top item in the Remote Control Gateway Servers console tree on the left, with a number of folders below it.
Page 49: Configure Security Through The Gateway
Gateway Operation Configure security through the Gateway PC-Duo Gateway has six different areas of security. ―Gateway Security‖  to configure user credentials-based rights to access and/or control this PC-Duo Gateway. ―Group security‖  to configure user credentials-based rights to access or modify the name or description of a managed Host Group.
Page 50: Configure The Gateway
Host, in order to avoid unnecessary network traffic. See for more information. 4 Install the current version of PC-Duo Host on all Host computers in your network to which you require remote access. Configure the following PC-Duo Host tasks as necessary: ...
Page 51 Assign the access and control rights to individual users, or to (domain) groups of users. In particular, if users who connect to the PC-Duo Gateway via PC-Duo Master are not in the Administrators group, you must, at minimum, assign access rights to the PC- ―Gateway...
Page 52: Gateway Configuration
Gateway Configuration This section explains each of the components of PC-Duo Gateway that can be configured using the PC-Duo Gateway Administrator. ―Remote Control Gateway servers‖  to add or delete PC-Duo Gateways in the PC- Duo Gateway Administrator. ―Gateway Server Settings‖...
Page 53: Remote Control Gateway Servers
Gateways is listed under . If you install PC-Duo Gateway Remote Control Gateway Servers Administrator on the same computer on which you install the PC-Duo Gateway, your PC- Duo Gateway Administrator is automatically set to connect to and configure your PC-Duo Gateway.
Page 54: Connect/Disconnect
 Specify a PC-Duo Gateway network address and protocol directly.  Poll to discover PC-Duo Gateway on your network with a specified protocol, and select a PC-Duo Gateway from the resulting list. Connect/Disconnect Toggle the PC-Duo Gateway Administrator connection to select a Gateway server that you have configured.
Page 55 When the PC-Duo Gateway Administrator is connected, a green icon will appear next to the Gateway; some connection properties and basic Gateway information will be presented. If the PC-Duo Gateway Administrator is not connected, a red icon will appear next to the Gateway: Connection tab...
Page 56 Check to encrypt data exchanges between PC-Duo Gateway Use encryption Administrator and the PC-Duo Gateway. If the Administrator or the PC-Duo Gateway requests encryption, the connection will be encrypted. Connect As tab tab lets you view and/or edit the credentials used by PC-Duo Gateway...
Page 57 With this option, you can check to use Save this username and password for later it for all future connections to the PC-Duo Gateway. NOTE: You must also configure access rights on the PC-Duo Gateway for the credentials used.
Page 58: Gateway Server Settings
 "Poll for Hosts" - to search your network for computers running PC-Duo Host (either manually or on a schedule) and to list these under a selected PC-Duo Gateway in the PC-Duo Gateway Administrator window.  "Gateway Security"...
Page 59  Logged-in user-based managed Host management, where managed Hosts may be displayed both as workstations and as logged-in users in the PC-Duo Gateway Administrator and PC-Duo Master. With this approach, you can specify remote control access policies for managed Host computers based on which user is logged in to them.
Page 60 PC-Duo Gateway Server Guide The following options can be set in the tab: General  Type or modify the name for the Gateway under Gateway station name  If you plan to manage a large number of workstations, you can check Automatically move newly discovered workstations from “Unmanaged Hosts”...
Page 61 MACHINE-Gateway-YYYY-MM-DD-HH.CSV, where MACHINE is the machine name of the computer on which the PC-Duo Gateway is running, and YYYY-MM-DD-HH is the date and time of the last log file rollover period. You can use Microsoft Excel to view and print the audit log file.
Page 62 PC-Duo Gateway Server Guide Number representing the type or cause of the event: • 0 = Success • 1 = Error Type • 2 = Warning • 4 = Information • 8 = Audit (Security Check) Success • 16 = Audit (Security Check) Failure...
Page 63 Gateway Configuration Indicates type of target: • host • workstation • session • activerecording • activemaster • activeclient • licenses • pollschedules • user TargetType • group • activehost • application • protocols • activeplayback • settings • memberships • unmanagedhost •...
Page 64 PC-Duo Gateway Server Guide Logging options can be configured from the tab of the General Settings Auditing Properties window:  If you do not want to log Gateway-managed remote connection activity, do not check either Audit Logging Location box. ...
Page 65 Gateway Configuration  - Use this field to specify how Automatically delete log files older than (days) many days you want to save the log files. Enter the number of days. 40 days is the default value. This ensures that all activity, for at least over the past 30 days, has been logged for accounting purposes.
Page 66 If you have stopped the PC-Duo Gateway during a scheduled audit log rollover, the rollover will occur when you next restart the PC-Duo Gateway, and the newly generated events will be added to the correct log file.
Page 67 Gateway Configuration From the drop-down list box, type the port or select the standard port (default), and Port then check the checkbox to enable any of the following protocols: Enabled  UDP/IP  TCP/IP   Address Bindings For the TCP/IP or SSL protocol, click to select addresses to which the selected Bindings protocol should bind.
Page 68 Host connections to Host computers. Click to configure address restrictions on Other Clients connections to client computers running PC-Duo Master or PC-Duo Gateway Administrator. The windows that appear after clicking are similar Host Other Clients to the one shown below for TCP Host Address Restrictions.
Page 69 TCP/IP or SSL policy for a group of addresses. You can specify the group of addresses via a single address and a subnet mask. For the SSL protocol, click to view the currently installed security certificate. View Cert Certificates are selected and managed using the PC-Duo Gateway Certificate Manager.
Page 70 Gateway Data Services data services, such as those used to present lists of Hosts or configuration information, in the PC-Duo Master or the PC-Duo Gateway Administrator. Such services include settings, listing of managed Hosts, and listing of groups of Gateway Hosts.
Page 71 Periodic tasks should be scheduled to occur when you expect the PC-Duo Gateway to be used minimally, such as overnight. Any attempt to access a Host or play a recording on it is delayed until the server finishes...
Page 72 PC-Duo Gateway Server Guide To set the , choose one of the following options: Periodic Tasks Schedule  - Specify the time by selecting the Once a day, on selected days of the week Starting at from the drop-down lists. Check one or more day checkboxes to specify...
Page 73 Gateway Configuration  - Specify the most specific dates and times by According to an Advanced schedule typing comma-separated values for the following settings:  - Acceptable values are the month abbreviation or number of a Set of Months month. For example, the ninth month could be specified as Sep or 9. If you leave this field blank, the schedule runs every month.
Page 74 General Settings Properties window to specify the Recordings following parameters:  The directory where the PC-Duo Gateway saves Host recordings.  When a checkpoint is generated during a recording.  The limits for how large, long, and old a recorded session can be.
Page 75 Gateway Configuration To specify the location where the PC-Duo Gateway saves recorded sessions, type a full text box. The default is C:\Program path in the Recording File Directory Files\Vector Networks\PC-Duo Gateway\Data\Recordings. In the Master Playback window, when you position the slider forward or backward within a recording, the playback must resume from the nearest checkpoint, which provides a complete picture of the Host screen.
Page 76 Host, so the option will be Use Host settings for screen capture preferences set (see Screen tab in PC-Duo Host Guide for more information).  If you prefer to override the Host preferences, select Override Host settings as...
Page 77 Gateway Configuration Each "user mode profile‖ consists of the following information:  Description string  Image type (enumeration, current default is JPEG)  Image compression quality (numeric value 1-100, with 100 being best quality)  Polling frequencies (three values -- Capture, Foreground, and Background, in milliseconds).
Page 78 To remove a license from your PC-Duo Gateway, select the license from the list of licenses and click Remove License  To add a license to your PC-Duo Gateway, type a valid license in the text box and click . Your valid PC-Duo Gateway license appears in the list of licenses at Add License...
Page 79 Gateway is monitored against the total number of users that is allowed to report to the Gateway according to the license(s) installed (only the keys labeled ―Gateway Server Concurrent Users‖ will be recognized). Note: This model is enforced when the PC-Duo Web Console is present. There are three types of Hosts monitored: ...
Page 80 Gateway using a Personal account in Personal users the Web Console. Note: See the PC-Duo Web Console Operating Guide for more information about Web Console account types Incremental Licenses In each license model, the licensed Gateway capacity can be increased by adding one or more licenses through the Add License field.
Page 81 Gateway Configuration Network tab Network address ranges that the PC-Duo Gateway will consider to be on "the local network" can be viewed, added or deleted on the tab. Hosts that appear to be on Network "the local network" will not automatically have Reverse Connections kept open.
Page 82: Polling For Hosts
Polling for Hosts PC-Duo Gateway can periodically search the network for computers running PC-Duo Host according to a schedule you create. Schedule your PC-Duo Gateway to search for Host computers based on network address, protocol, and port. Each search you create and save is called a polling schedule.
Page 83 "Run a polling schedule manually" NOTE: If you configure all Host computers in your network to report to the PC-Duo Gateway, then you need not configure a polling schedule. It is useful to configure a polling schedule if you need to manage Host computers on your network that are not yet configured to report to the PC-Duo Gateway, or to discover any unauthorized network computers running PC-Duo Host.
Page 84 Polling for Hosts select Delete View polling schedule properties You can poll for network computers running PC-Duo Host by specifying the port, protocol, and address on the tab of the Polling Schedule Properties window. General Specify the protocol and one or more addresses: ...
Page 85 Gateway Configuration  Select to poll for a single Host computer by its IP Broadcast to address address. Type an IP address in the text box. Address  Select to poll for a set of Host computers by specifying a Scan address range range of network IP addresses.
Page 86 PC-Duo Gateway Server Guide  Select the number of times each day to repeat the polling schedule.  Select the frequency of repetition and starting time.  Using an advanced schedule:...
Page 87: Gateway Security
Gateway, the right to manage Hosts and create groups, and the right to view active status information. If a user does not have the right to make connections to the PC-Duo Gateway, then he or she also cannot make any connections to Gateway-managed Hosts with PC-Duo Master.
Page 88 View Information  : Includes permission to read/write access of information. Modify Information  : Includes permission to connect to the PC-Duo Gateway Connect from Master from a Master.  : Includes permission to change Data Services Security. Edit Security ...
Page 89 Services Security tab away from another user and give them to yourself. If you take ownership of permissions, you can change them. Settings Security Access control and security permissions for PC-Duo Gateway settings can be granted from the tab of the window.
Page 90 Advanced page. The following common groupings exist:  : Includes every permission in the list. Full Control/Administration  : Includes permission to read-only access to PC-Duo Gateway View Settings settings.  : Includes permission to read/write PC-Duo Gateway settings.
Page 91 Gateway Configuration In the tab of the Advanced Security Settings window, select an entry for Permissions which you want to assign advanced permissions and click . The Permission Entry Edit window opens: Each advanced permission is treated individually; you can click for any Allow Deny...
Page 92 If you take ownership of permissions, you can change them. Operation Security Access control and security permissions for PC-Duo Gateway operations can be granted from the tab of the window.
Page 93 : Includes permission to call the PC-Duo Gateway Client Import Session methods import_v25_Session and importSession, which create entries in the PC-Duo Gateway database to import a specific file of a recorded session. This can be accessed only by writing an application with the PC-Duo SDK. ...
Page 94 Deny permission in the list. The following permissions exist:  : Includes permission to call the PC-Duo Gateway Client method Record to File beginRecordingToFile, which starts a Host recording to a specific file. This can be accessed only by writing an application with the PC-Duo SDK.
Page 95: Managed Hosts
Hosts must first be configured to report to the PC-Duo Gateway. See Host Administrator guide for more information. By default, all Host computers that are configured to report to the PC-Duo Gateway are initially listed in the folder. To configure any unmanaged Host for PC-...
Page 96 PC-Duo Gateway Server Guide The following section includes descriptions of commands available from the context menu when a Managed Host is highlighted and Action is selected from the Gateway Administrator tool bar or the user right-clicks on the highlighted Host:...
Page 97: Send Wake-On-Lan Signal
When a Master attempts to connect through the Gateway to a remote computer with a Host, and the last Host status in the Gateway indicates that the Host is offline, PC-Duo assumes that the remote computer is asleep, and will automatically send the Wake-on- LAN signal (based on its MAC address and last known IP address).
Page 98: Manage Groups
. If the selected Delete from Gateway Hosts are still configured to report to the PC-Duo Gateway, they will continue to do so until they are reconfigured (i.e. Gateway is removed from the Gateways tab in the Host), and may quickly reappear in the folder.
Page 99 Gateway Configuration Add a group If you manage a large number of Host computers, it may be convenient for you to create groups of managed Hosts to which you apply the same security policies. For example, you could create a group, represented by a folder called Engineering, that would contain the workstations in an engineering group.
Page 100 PC-Duo Gateway Server Guide To rename a group listed in the folder, double-click the group, and Managed Hosts change the name of the group on the General tab. General group properties View and/or edit the group name and description from the...
Page 101 In the tab, the following tasks can be performed: Group Security  Click to add a user or group for which PC-Duo Master user will specify permissions.  Select a user or group that has permissions and click to remove it.
Page 102  : Determines if PC-Duo Master user can view the selected group. Visible  : Determines if PC-Duo Master user can modify settings for the selected Modify Group group.  : Determines if PC-Duo Master user can delete the selected group.
Page 103 : Determines if PC-Duo Master user can take ownership of Take Ownership permissions in the Group Security tab away from another user. If PC-Duo Master user takes ownership of permissions, PC-Duo Master user can change them. Host security for a group...
Page 104  : Includes every permissions in the Advanced list except permission to Full User delete a Host or edit the security from the PC-Duo Gateway.  : Includes permission to connect to any Host in the group and Remote Control control it via the keyboard and mouse.
Page 105 : Determines if PC-Duo Master user can see Hosts that are in the group. Some Visible Hosts could be in the group, but not be visible to PC-Duo Master user, if blocked by individual Host permissions or other group permissions.
Page 106 Host computer application from the Remote Control tab of the PC-Duo Master Remote Desktop Window.  : Determines if a PC-Duo Master user can be added to a private chat room Chat including the PC-Duo Host user, and any other PC-Duo Master users connected to the same Host.
Page 107 : Determines if PC-Duo Master user can play sessions Play Recorded Session that were recorded on Hosts in this group.  : Determines if PC-Duo Master user can delete sessions that Delete Session were recorded on Hosts in this group. ...
Page 108 Deny the following permissions:  : Determines if PC-Duo Master user can see sessions that were recorded on Visible any Host in the group. Sessions are listed on the Sessions tab of the Host properties and on the bottom half of the Managed Hosts tab of the PC-Duo Master.
Page 109: Manage Hosts
: Determines if PC-Duo Master user can take ownership of Take Ownership permissions in the Session Security tab away from another user. If PC-Duo Master user takes ownership of permissions, PC-Duo Master user can change them. Hosts in a group...
Page 110 PC-Duo Gateway Server Guide To view the properties of any Host in a group, double-click on any Host listed in the group to bring up the Root Properties window For more detailed information, see the following topics: ―General‖  to review managed Host connection information.
Page 111 Unmanaged Hosts list. NOTE: If the selected Hosts are still configured to report to the PC-Duo Gateway, they will continue to do so until the Gateway entry is removed from their Gateways tab, and may quickly reappear in the list.
Page 112 PC-Duo Gateway Server Guide The workstation’s Host key will be needed to connect to a Host through a PC-Duo NOTE: Gateway from the PC-Duo Master command line. See the PC-Duo Master Guide for more information. Host security Set security permissions for access to a specific managed Host by editing the Host tab on the Properties window for that Host..
Page 113  : Includes permission to connect to a Host via the PC- Remote Administration Duo Gateway using the PHSETUP.EXE command line utility.  : Determines if PC-Duo Master user can change the security Edit Security settings for the selected Host.
Page 114 : Determines if PC-Duo Master user can see this Host. Some Hosts may not Visible otherwise be visible to PC-Duo Master user if blocked by permissions at the group level.  : Determines if PC-Duo Master user can connect to all Hosts for Connect for Services Remote Control, File Transfer, and Remote Printing.
Page 115 Host application from the Remote Control tab of the PC-Duo Master Remote Desktop Window.  : Determines if a PC-Duo Master user can be added to a private chat room Chat including the PC-Duo Host user, and any other PC-Duo Master users connected to the same Host.
Page 116 PC-Duo Gateway Server Guide Click to view special permissions and advanced settings; the Advanced Advanced window will appear. Security Settings In the tab of the window, select a user or group Permissions Advanced Security Settings of users for which you want to view advanced permissions and click .
Page 117 : Determines if PC-Duo Master user can see this Host. Some Hosts may not Visible otherwise be visible to PC-Duo Master user if blocked by permissions at the group level.  : Determines if PC-Duo Master user can connect to all Hosts for Connect for Services Remote Control, File Transfer, and Remote Printing.
Page 118 PC-Duo Gateway Server Guide  : Determines if a PC-Duo Master user can be added to a private chat room Chat including the PC-Duo Host user, and any other PC-Duo Master users connected to the same Host.  : Determines if a PC-Duo Master user can issue WMI commands...
Page 119 Gateway Configuration The user-specific security policy is applied first. The group security policy for any group to which the user belongs is applied next. The remote machine security policy is applied next. The group security policy for any group to which the remote machine belongs is applied last.
Page 120 : Determines if PC-Duo Master user can play sessions Play Recorded Session that were recorded on this Host.  : Determines if PC-Duo Master user can delete sessions that Delete Session were recorded on this Host.  Determines if PC-Duo Master user can change the Session Edit Security: security settings for the selected Host.
Page 121 These permissions apply to the selected managed Host only.  : Determines if PC-Duo Master user can see sessions that were recorded on Visible this Host. Sessions are listed on the Sessions tab of the Host properties and on the bottom half of the Managed Hosts tab of the PC-Duo Master.
Page 122  : Determines if PC-Duo Master user can take ownership of Take Ownership permissions in the Session Security tab away from another user. If PC-Duo Master user takes ownership of permissions, PC-Duo Master user can change them. Sessions View a list of completed recording sessions for a specific Host by selecting Sessions on the Properties window for that Host.
Page 123 - Displays the unique identifier for the recording in the system. Recording Key  - Displays the full path and name of the recording on the PC-Duo Filename Gateway. The default name of a recording is the Host name, followed by the start date and time.
Page 124: Terminal Services Group
PC-Duo Gateway Server Guide Groups View all of the groups to which a managed Host belongs from the tab on the Groups Properties window for that Host. . Terminal Services group A new group called "Terminal Services on <ServerName>" appears when Hosts running in Terminal Services sessions on the Terminal Services server called <ServerName>...
Page 125: System Group
System Managed Hosts Hosts you can connect to with PC-Duo Master to view some administrative data. None of the managed Hosts are contained in this group. This group or the Hosts within it can be deleted, but you can set the security for the group and its Hosts just as you would for any...
Page 126 PC-Duo Gateway Server Guide View statistics of the PC-Duo Gateway by connecting to either of these virtual Hosts from your Master:  "Gateway Server 'At-A-Glance'"  "Gateway Server Performance" Gateway Server 'At-A-Glance' provides some server-specific statistics when you connect to Gateway Server At-A-Glance it in the Systems Group on the Managed Hosts tab of the PC-Duo Master window.
Page 127 Gateway Configuration Gateway Server Performance provides some process-specific statistics when you Gateway Server Performance Monitor connect to it in the Systems Group on the Gateway Hosts tab of the PC-Duo Master window.
Page 128 PC-Duo Gateway Server Guide...
Page 129: Unmanaged Hosts
Gateway Configuration Unmanaged Hosts Unless the default settings for a PC-Duo Gateway are modified, all managed Hosts that are configured to report to a PC-Duo Gateway are initially listed under Unmanaged Hosts PC-Duo Gateway cannot be used to control access to any unmanaged managed Hosts.
Page 130: Active Status
―Pending Host Status Updates‖  Active Users This folder shows a list of all the user accounts currently connected to the PC-Duo Gateway for services, including administration and remote desktops. Active Gateway Data Services This folder shows a list of all the PC-Duo applications currently connected to the PC-Duo Gateway for services, including PC-Duo Web Console, PC-Duo Gateway Administrator, PC-Duo Master.
Page 131: Active Master Connection Services
This folder shows a list of all the PC-Duo Master users with active remote desktop windows to Hosts open through the PC-Duo Gateway. Active Hosts This folder shows a list of all the PC-Duo Hosts that have one or more remote desktop windows open through the PC-Duo Gateway.
Page 132: Active Recordings
PC-Duo Gateway Server Guide Active Recordings This folder shows a list of all the PC-Duo Hosts that are currently being recorded through the PC-Duo Gateway: Reverse Connections This folder shows a list of all the PC-Duo Hosts that are currently using reverse...
Page 133: Pending Host Status Updates
Gateway Configuration Pending Host Status Updates This folder shows a list of all the PC-Duo Hosts that are waiting for status updates.
Page 134: Help
. Help for the selected item displays. Help  Press F1 on your keyboard when you have selected any node or item in the PC-Duo Gateway Administrator window to display Help for the selected item. About PC-Duo Gateway You can check the version number of the PC-Duo Gateway software you are running by...
Page 135: Gateway Event Messages
Gateway Event Messages Use this appendix as a reference to look up PC-Duo Gateway event messages that may appear in the System Event Viewer or PC-Duo Gateway log file, depending on your Gateway Audit Log settings.  Startup, Shutdown, and Failure Messages (100-199) ...
Page 136 PC-Duo Gateway Server Guide The PC-Duo Gateway Server could not start because an error ([ERROR]) occurred accessing the recording directory: [LOCATION] The PC-Duo Gateway Server could not start because an error ([ERROR]) occurred accessing the audit log directory: [LOCATION] Polling and Host Status Update Messages (200-299)
Page 137 Gateway Event Messages Gateway noted failure attempt to authenticate for Admin services from [ADDRESS] via [PROTOCOL] (error code:[ERROR]). Gateway noted failure attempt to authenticate for Admin services from [ADDRESS] via [PROTOCOL] (error code:[ERROR]). Gateway noted failure attempt to authenticate reverse connection from [ADDRESS] via [PROTOCOL] (error code:[ERROR]).
Page 138 PC-Duo Gateway Server Guide Connection [APPID] administration access was denied. Required rights [RIGHTS]. Connection was attempted by [USERNAME] at address [ADDRESS]. Connection [APPID] was opened for Master services using [SERVICE]. Connection was opened by [USERNAME] at address [ADDRESS]. Connection [APPID] for Master services using [SERVICE] has been closed.
Page 139 Gateway Event Messages [RIGHTS]. Connection was opened by [USERNAME] at address [ADDRESS]. Connection [APPID] started recording of Host [STATION] ([WORKSTATIONID]). Connection was opened by [USERNAME] at address [ADDRESS]. Connection [APPID] canceled recording [SESSIONID] of Host [WORKSTATIONKEY]. Connection was opened by [USERNAME] at address [ADDRESS].
Page 140 PC-Duo Gateway Server Guide [USERNAME] at address [ADDRESS]. Connection [APPID] reordered groups. Connection was opened by [USERNAME] at 1006 address [ADDRESS]. Connection [APPID] denied group reorder. Required rights [RIGHTS]. Connection was 1007 opened by [USERNAME] at address [ADDRESS]. Connection [APPID] deleted (closed) admin connection to [WORKSTATIONID].
Page 141 Gateway Event Messages Connection [APPID] denied right to manage Host [STATION] ([WORKSTATIONID]). Required rights [RIGHTS]. Connection was 1017 opened by [USERNAME] at address [ADDRESS]. Connection [APPID] unmanaged Host [STATION] ([WORKSTATIONID]). 1018 Connection was opened by [USERNAME] at address [ADDRESS]. Connection [APPID] denied right to unmanage Host [STATION] ([WORKSTATIONID]).
Page 142 PC-Duo Gateway Server Guide opened by [USERNAME] at address [ADDRESS]. Connection [APPID] queried (read) connection to Host [WORKSTATIONID] at 1028 [ADDRESS]. Connection was opened by [USERNAME] at address [ADDRESS]. Connection [APPID] denied right to query connection to Host [WORKSTATIONID] at [ADDRESS].
Page 143 Gateway Event Messages Connection [APPID] was denied input control of Host [STATION] ([WORKSTATIONID]). Required rights [RIGHTS]. Connection was 2001 opened by [USERNAME] at address [ADDRESS]. Connection [APPID] released input control of Host [STATION] ([WORKSTATIONID]). 2002 Connection was opened by [USERNAME] at address [ADDRESS].
Page 144 PC-Duo Gateway Server Guide [USERNAME] at address [ADDRESS]. Connection [APPID] queried (read) record for Host [STATION] ([WORKSTATIONID]). 2014 Connection was opened by [USERNAME] at address [ADDRESS]. Connection [APPID] denied query of Host [STATION] ([WORKSTATIONID]. Required 2015 rights [RIGHTS]. Connection was opened by [USERNAME] at address [ADDRESS].
Page 145 Gateway Event Messages Connection [APPID] denied change notifications for [COLLECTION]. Required 3001 rights [RIGHTS]. Connection was opened by [USERNAME] at address [ADDRESS]. Connection [APPID] read diagnostic logging 3002 settings. Connection was opened by [USERNAME] at address [ADDRESS]. Connection [APPID] denied read access to diagnostic logging settings.
Page 146 PC-Duo Gateway Server Guide Connection [APPID] modified protocol [PROTOCOL]. Connection was opened by 3014 [USERNAME] at address [ADDRESS]. Connection [APPID] denied modify of protocol [PROTOCOL]. Required rights 3015 [RIGHTS]. Connection was opened by [USERNAME] at address [ADDRESS]. Connection [APPID] queried (read) protocol [PROTOCOL].
Page 147 Gateway Event Messages Group Messages (4000-4999) Message ID Message Description Connection [APPID] modified Group [GROUPNAME] ([GROUPID]). Connection 4000 was opened by [USERNAME] at address [ADDRESS]. Connection [APPID] denied modify of Group [GROUPNAME] ([GROUPID]). Required rights 4001 [RIGHTS]. Connection was opened by [USERNAME] at address [ADDRESS].
Page 148 PC-Duo Gateway Server Guide Connection [APPID] deleted SessionSecurity for ([WORKSTATIONID] X [USERNAME]). 5006 Connection was opened by [USERNAME] at address [ADDRESS]. Connection [APPID] denied delete of SessionSecurity for ([WORKSTATIONID] X [USERNAME]). Required rights [RIGHTS]. 5007 Connection was opened by [USERNAME] at address [ADDRESS].

This manual is also suitable for:

Pc-duo 12.0