Topic: 问个计算机系统管理的问题。上班的时候打电话要求管理员做技术支持，结果他就能远程直接控制和接管我计算机的现有session，不是重新login，边打电话边操作，我能看到他做的一切。这是通过什么实现的？我的系统是XP。这是不是意味着网管可以随时看到我的计算机？谢谢！ @佛州华人论坛:佛州枫下论坛 The Rolia Forum of Florida

工作学习 / 学科技术讨论 / 问个计算机系统管理的问题。上班的时候打电话要求管理员做技术支持，结果他就能远程直接控制和接管我计算机的现有session，不是重新login，边打电话边操作，我能看到他做的一切。这是通过什么实现的？我的系统是XP。这是不是意味着网管可以随时看到我的计算机？谢谢！ -tuigupiao(tuigupiao); 2008-7-24 (#4577416@0)

通过网络，远程管理。是，所以要好好上班，不要利用公司资源干私活。不谢。 -c1xwy(洪兴罩俺去战斗); 2008-7-24 (#4577441@0)

谢谢！我只是觉得奇怪是怎么实现的？因为Remote Desktop 和 Terminal Service 都要有新的session, 而我并没有通过Remote Assistant 或Netmeeting邀请他take control我的计算机。 -tuigupiao(tuigupiao); 2008-7-24 (#4577510@0)

远程控制软件多了 -googlebot(bot); 2008-7-24 (#4577525@0)
If admin takes away your desktop, he is within the same session as you. There are many software to do that. A system admin can remotely enable/start a service, remotely copy an EXE to your computer and start it. -cerboros_redux(Cerboros Reborn); 2008-7-25 (#4579150@0)

I recall one day admin came to tell me that my VNC was disabled, he could not login, so we open it, enabled something, I will go check next week. You can only copy/paste text between VNC window and ur desktop, no binary is allowed.This is not convenient for troubleshooting. -nicetomeetyou(一针牛); 2008-7-25 {44} (#4579747@0)

你的机器里早就装上了VNC client.Sys Admin没告诉过你？ -nicetomeetyou(一针牛); 2008-7-24 {21} (#4577541@0)

But I disabled this VNC service. Can Admin still remote my PC? -whereismyid(到处找ID); 2008-7-25 (#4578228@0)

Everytime you start your PC, it will first run scripts which admin has planted on your PC, then script runs other scripts on network drive, scripts will do whatever admin wants to do based on comp IT policy. Plus, admin can access your PC anytime. -nicetomeetyou(一针牛); 2008-7-25 (#4578661@0)

what did you mean by anytime? behind my notice ?(let's see I'm working on my computer with VNC disabled) -whereismyid(到处找ID); 2008-7-25 (#4578791@0)

If your computer is on domain, domain admin will be admin of your computer too, and they can install software, enable/disable service, almost anything remotely. -liquid(豆泡松果之松果豆泡); 2008-7-25 (#4579003@0)

I knew it. But I run netstat every 5 mins. Can he skip netstat? -whereismyid(到处找ID); 2008-7-25 (#4579040@0)

do u know that ur vnc agent runs on the default ports? -buma(蔓毒黛扬); 2008-7-25 (#4579148@0)

I did shut down vnc server service in my computer. I will get the vnc icon at bottom of my desktop if he re-starts such service remotely -whereismyid(到处找ID); 2008-7-25 (#4579181@0)

那当时你有没有在task manager看到vnc的process？（show all enabled ）don't forget vnc is open sourced, it means the behaviours can change dramatically depending on the implementation. displaying icon or not is not something u can be sure about.
heck, in that case, not seeing it in the task mamager processes list table can't prove anything neither.

btw, even if you did shutdown the vnc service, the IT support still can remotely enable this service. I hope you understand that. -buma(蔓毒黛扬); 2008-7-25 {416} (#4579236@0)

You can run Process Explorer to check the running processes on your computer: www.sysinternals.com -liquid(豆泡松果之松果豆泡); 2008-7-25 (#4579593@0)

Negative. Service process cannot put icon onto your desktop, only user mode process can do that. -liquid(豆泡松果之松果豆泡); 2008-7-25 (#4579589@0)
did your company use any online remote controls service,such as Logme in, or go to my Pc etc... -kevin_tor(KFC); 2008-7-27 (#4581278@0)

喉吼, CLIENT和SERVER都搞不懂 -maplew2008(call me at 9.1.1); 2008-7-25 (#4578814@0)

can't blame him for that. -buma(蔓毒黛扬); 2008-7-25 (#4578832@0)

i call those type of stuff "agent" even though it is a vnc serverpeople get confuzed some time if it is refered to as a vnc server. besides, NiuGe is not an IT guy anymore. he is a future-to-be politician now -buma(蔓毒黛扬); 2008-7-25 {144} (#4578837@0)

It is confusing to call it a server on a client PC, even though it is really a server waiting for call. Using agent is fine, because most pieces of software have both client and server functions.I am a IT guy always! -nicetomeetyou(一针牛); 2008-7-25 {21} (#4578898@0)

说错话也是很正常的，有什么不可以接受的。 -vetra(豆泡松果之多泡泡); 2008-7-25 (#4579001@0)
houhou, 越说月漏馅, 你知道什么叫SERVER吗? It called two parts, not two functions. 跟你这种IT GUY讨论技术问题觉得掉价, 恕不奉陪. -maplew2008(call me at 9.1.1); 2008-7-25 (#4579081@0)

Sick, call 911 now .:-) -nicetomeetyou(一针牛); 2008-7-25 (#4579132@0)

用牛鞭抽 -readonly(ReadOnly); 2008-7-25 (#4579171@0)

说错了，是用牛针扎 -readonly(ReadOnly); 2008-7-25 (#4579174@0)

you always say some non-sense to disguise your embarrassment. -heresy(arcadia); 2008-7-25 (#4579173@0)

Interesting ! My embarrassment, or your resentment? Is this still technical discussion?U r sick too. Don't reply. I am away now. -nicetomeetyou(一针牛); 2008-7-25 {42} (#4579216@0)

you are unwittingly admitting your embarrassment by accusing someone. You'd better live your rest of life in pity of repentance. -heresy(arcadia); 2008-7-25 (#4579531@0)
by the way, you are never "technical". you are just an elf in this forum. your sentimental characteristic is well known here. -heresy(arcadia); 2008-7-25 (#4579532@0)

So you are a judge. You are a superior master of the technology. Now I know it. I hope it t is not too late. Solute ! :-)You so care what you say and feel. Now please feel mentally healthy well by biting hard. I, don't care. -nicetomeetyou(一针牛); 2008-7-25 {104} (#4579692@0)

Let me talk to you once more about tech item: When I talked about function, I talked it in general sense. Server is a thread staying in mem monitoring specific port(s) to respond. In most tech support PCs, both VNC client and server are installed.If you talk like a professional, continue, if not, stay yourself cool. I don't mind if you are not professional or, talk like an idiot. -nicetomeetyou(一针牛); 2008-7-25 {136} (#4579190@0)

借这个话题问一下，是不是公司电脑只要在internet上，公司网管就能监控？不需要电脑VPN？看了很多黄色网站，不会被记录了吧。 -fearfree(fearfree); 2008-7-25 {34} (#4579736@0)

象net meeting之类的软件可以让参与会议的人看到你的桌面,管理员可以在domain内任何一台计算机里面启动进程, 如netmeeting server, 然后作为客户端连接上. 关于你上黄色网站的问题....首先上网纪录浏览器有 history list(以文件存放),系统管理员可以通过远程检查你的文件得到你的上网纪录; 其次, 上网监控可以这样实现: 方法一, 公司里面的每台电脑装了ndis driver (The Network Driver Interface Specification (NDIS)), 在浏览器中的URL request可以被这个driver截获,发往监控主机进行realtime监控. 方法二, 在你的网关实现监控, 你的网关可以是一台linux电脑, 里面运行截获软件(一般是内核模块). -thunderbolt(孙悟空); 2008-7-27 {386} (#4581233@0)
你不在公司的内部网上面还是比较难监控的....除非网管在你的机器里面放上后门,但是多数后门都会被杀毒软件杀掉....那就看你们公司的policy啦....不觉得哪家公司会去监控你在内部网外面的行为.但是你连进VPN的话,那就不一样啦,那就要监控啦 -kevin_tor(KFC); 2008-7-27 (#4581277@0)

@Florida

Topic

More Topics