TABLE OF CONTENTS

• Objective
• Connecting via VNC
  • Prerequisites
  • Step 1: Logon to the MTR for Windows device
  • Step 2: Download TightVNC
  • Step 3: Install TightVNC on the Teams Rooms Device
  • Step 4: Configure TightVNC Server
  • Step 5: Connect to the Teams Room Device Remotely
  • Step 6: Managing Microsoft Teams Rooms Remotely
• Connecting via Remote Desktop (RDP)
  • Prerequisites
  • Step 1: Logon to the MTR for Windows device
  • Step 2: Change the local computer policy
  • Step 3: Setup Remote Desktop access and permissions
  • Step 4: Connect to the MTR using Remote Desktop
• Summary

Objective

This guide will show you how to set up remote access to your Microsoft Teams Room for Windows devices to be ready to start using the Morbit Studio Remote Connections feature.

There are two methods described here – VNC and Remote Desktop. Our recommendation is via VNC as this method is more secure, as the Remote Desktop method requires some security protections to be removed.

Before making changes to your system, please read through this guide to understand the requirements prior to making changes on your devices.

Connecting via VNC

Prerequisites

• Administrative access to the Microsoft Teams Rooms device.
• The device must be connected to your network and able to access the internet.
• Remote Connections feature is enabled and set up in Morbit Studio, where the Hub has network access to the devices being connected to.

Step 1: Logon to the MTR for Windows device

1. Login as Administrator: On your Teams Room Controller, select More > Settings.
2. Authorise the Admin account: When prompted, enter the Administrator account password. 

Note: The default password (unless changed) is: sfb

3. Go into the Windows Settings: Select ‘Windows Settings’.
4. Login as Administrator: Select the Administrator account and enter the password (same as above).

Step 2: Download TightVNC

1. Navigate to the TightVNC Download Page: Open up Microsoft Edge and go to the official TightVNC website (https://www.tightvnc.com/download.php).
2. Select the Appropriate Version: Choose the version suitable for your device’s operating system.

Note: The is very likely to be the ‘Windows 64-bit’ version.

Step 3: Install TightVNC on the Teams Rooms Device

1. Run the Installer: Open the downloaded installer file on your Microsoft Teams Rooms device.
2. Follow the Installation Prompts: Select a ‘Custom’ installation and deselect ‘TightVNC Viewer’ with the option ‘Entire feature will be unavailable’. Click Next.
3. TightVNC Service Configuration: Select the options shown below to make sure the software runs as a system service. Click Next.
4. Click on the ‘Install’ button to start the installation.
5. Set Passwords: After completing the installation, set a primary password for remote access and an Administrative password (if needed). For good security practice, make sure these are at least 8 characters and complex.

Step 4: Configure TightVNC Server

1. Access TightVNC Server Settings: After installation, open the TightVNC Server settings from the system tray.
2. Adjust Connection Properties: Configure settings such as port numbers and access controls.

Note: The ‘Main Server Port’ is the port you will need to connect to from within ‘Remote Connections’ when using the ‘Custom TCP Port’. Port 5900 being the default for VNC.

If not doing the next configuration item (Step 4a), reboot the computer so as it automatically logs back in to the MS Teams user interface

Step 4a: Configure User prompt for authorisation to connect (optional)

1. Open the Access Control tab:
   1. In the Rules section, click 'Add'. Add the IP address range for the local subnet (or specific IP) that has the computer with the Hub software installed on it.
   2. For the Action, select 'Query local user' and then click 'OK'.
2. In the 'Query Settings' section of the Access Control tab, select the 'Default action on timeout' to be 'Accept connection', now Click 'OK'.
3. Complete the installation: Restart the computer so as it automatically logs back in to the MS Teams user interface.

Step 5: Connect to the Teams Room Device Remotely

1. Install TightVNC Viewer on Another Computer: Follow the same download and installation process on another computer from which you will control the Teams Rooms device, except during the Custom installation, choose the ‘TightVNC Viewer’ option instead.
2. Create a secure tunnel: 
   1. In Morbit Studio, navigate to the MTR you want to connect to within ‘Video Devices’, and click it to open the device details.
   2. Click the ‘Remote Connections’ menu and in the ‘Custom TCP Connection’ enter the port ‘5900’ (or alternate port if amended in Step 4).
   3. Click ‘Start Connection’ to establish a tunnel.
3. Establish the Connection:
   1. Launch TightVNC Viewer.
   2. Enter the IP address and port number provided from the ‘Custom TCP Connection’ tunnel of the Teams Rooms device and the access password. The format being: IPADDRESS::PORT (ensuring to use 2 x colons after the IP address)

Step 6: Managing Microsoft Teams Rooms Remotely

1. Use TightVNC Viewer for Remote Access: Once connected, you can control the Microsoft Teams Rooms device as if you were directly interacting with it.

By following these steps, you can efficiently manage your Microsoft Teams Rooms devices from any location using TightVNC. This setup allows for convenient monitoring and troubleshooting without needing to be physically present.

Connecting via Remote Desktop (RDP)

Prerequisites

• Administrative access to the Microsoft Teams Rooms device.
• The device must be connected to your network and able to access the internet.
• Remote Connections feature is enabled and set up in Morbit Studio, where the Hub has network access to the devices being connected to.

Step 1: Logon to the MTR for Windows device

1. Login as Administrator: On your Teams Room Controller, select More > Settings.
2. Authorise the Admin account: When prompted, enter the Administrator account password.Note: The default password (unless changed) is: sfb
   
3. Go into the Windows Settings: Select ‘Windows Settings’.
4. Login as Administrator: Select the Administrator account and enter the password (same as above).

Step 2: Change the local computer policy

1. Edit the local computer policy: Right-click the ‘Start’ menu and select ‘Run’. Type in ‘gpedit.msc’ and click ‘Ok’.
2. Navigate to the Security Options Policy: In the left pane, go to Local Computer Policy > Computer Configuration > Windows Settings > Security Settings > Local Policies > Security Options 
3. Allow blank password accounts: Navigate to "Accounts: Limit local account use of blank passwords to console logon only" and double-click on this setting. It is Enabled by default, which means that an account without a password cannot log in using Remote Desktop. Change the value to ‘Disable’ and click ‘OK’. 
4. Assign the Skype user Remote Desktop rights: Navigate to Local Computer Policy > Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights Assignments > Allow log on through Remote Desktop Services. Click on ‘Add User or Group’ and enter ‘Skype’ and select ‘Check Names’. The username will be resolved and underlined to confirm its validity. Click ‘OK’ then ‘Apply’ and ‘OK’ again to complete the process. 
5. Setup the Skype user for remote network access: Navigate to Local Computer Policy > Computer Configuration > Windows Settings > Security Settings > Local Policies > User Right Assignments > Access this computer from the network. Now add the ‘Skype’ user and click ‘OK’ to complete the process.

Step 3: Setup Remote Desktop access and permissions

1. Enable Remote Desktop on the MTR: Click the ‘Start’ button and type ‘Remote Desktop Settings’. Select the ‘Open’ link. 
2. Setup Skype user with Remote Desktop permissions:
   1. Still in the ‘Remote Desktop’ settings screen, go to the ‘User accounts’ section and click on ‘Select users that can remotely access this PC’. 
   2. Click the ‘Add’ button and enter ‘Skype’, then select ‘Check Names’. The username will be resolved and underlined to confirm its validity. Click ‘OK’ then ‘OK’ again to complete the process.
3. Login again as Skype user:
   1. Logout of the Admin account by clicking Start > Administrator and selecting ‘Sign Out’.
   2. Click the ‘Skype’ user in the bottom left, then click the ‘Sign in’ button in the centre of the screen.

Step 4: Connect to the MTR using Remote Desktop

1. Create a secure tunnel:
   1. From another computer, go into Morbit Studio. Navigate to the MTR you want to connect to within ‘Video Devices’, and click it to open the device details.
   2. Click the ‘Remote Connections’ menu. Select the ‘Network’ that can connect to the MTR and add the device IP address in the ‘IP Address’ section.
   3. Click ‘Start RDP’ to establish a tunnel.
2. Connect to the remote MTR:
   1. Load up the ‘Remote Desktop Connection’ client on your computer and copy/paste the Address provided and click ‘Connect’:
   2. When prompted ‘Do you trust this remote connection?’, click ‘Continue’.
   3. At the credentials screen, click ‘More Choices’ then ‘Use a different account’
   4. In the credentials screen, enter the Username of ‘skype’ and click ‘OK’.
   5. Click ‘Yes’ on the next screen prompting about certificate not being from a trusted certifying authority - this is to be expected.
   6. You will now be connected to the MTR.

Summary

Due to the requirement to provide a Remote Desktop connection to an account that has no password set, we do not recommend this method due to the decreased security on the device to enable this function. We only share this option as a possible solution. Our recommendation would be to use VNC solution above with a complex password.