To enable EV Reach's remote control user acceptance prompt before giving the admins the right to access their computer, you have three options. You can configure the remote control/ access policy in:

1. The EV Reach administrative GPO
2. The EV Reach Server
3. Direct Registry Modification (should be used for testing purposes only)

GPO Option

You can find the EV Reach administrative GPO template in C:\Program Files (x86)\GoverLAN v8\GPO Templates. You can import the ADMX files for domain controllers that are Server 2008 and above.

The GPO that you create must be linked to the OU that your user workstations and tech workstations are a member of.

Once you have the administrative template installed, create a GPO and configure the following setting.

Once this GPO has been created and linked to the proper OUs, RC will begin to require user acceptance before initiating connections.

EV Reach Server Option

You can Install the EV Reach Server on any Windows based server on you network. After you install the EV Reach Server, you will need to configure the following DNS entry on your DNS Server.

1. Download and install the EV Reach Server on any server you wish on you network.
2. After it is installed create a DNS SRV record on your DNS Server.
   1. In DNS go to Forward Lookup Zones
   2. Locate your domain zone
   3. Go to the _tcp folder
   4. Right click and select “Other New Records”
   5. Go to Service Locator (SRV)
   6. Create a record that looks like the following. Note: there is a “.” At the end of the FQDN in the host field.

After this record is created and DNS gets a chance to populate, the agents will begin reporting in to this server for settings.

Be sure the Windows Firewall is not blocking port 21160.

Enabling the policy in the EV Reach Server console

1. Go to the Universal Settings Distribution tab
2. Enable Universal Settings Distribution

   

3. Locate the following setting and click the Modify Settings link

   

4. Click the “…”.

   

5. Use the following value: \\Server\Share where Server is your server name and share is your share name.

   

6.  Click OK, then click Publish Settings.

   

As the agents check in, the will take policy and begin to enforce User Acceptance.

Direct Registry Modification

Use this method to test the User Acceptance prompt or if you cannot use the EV Reach Server or GPO methods.

Add the following registry key and value to the target machine HKEY_LOCAL_MACHINE\Software\Policies\PJ Technologies\EV Reach Universal Settings\GRMS DWORD VALUE: PreSessionAction Set PreSessionAction to one of the following: In this case, set the value to 2

1 => No Action (default) 2 => Prompt Local User 3 => Disable Remote Control 4 => Lock Computer 5 => Log out local use