Restrict TightVNC connections to LAN only #

  1. TightVNC Service Configuration → Access Control

  2. Click Add… → set "First matching" and "Last matching IP" values to cover desired LAN range (e.g., 192.168.0.1 and 192.168.0.254) → set "Action" to Allow → click OK

  3. Click Add… → set "First matching" to 0.0.0.0 and "Last matching IP" to 255.255.255.255 → set "Action" to Deny → click OK

  4. Click Apply

  5. Optionally adjust local and remote IP address scope for TightVNC's default inbound rule in Windows Defender Firewall with Advanced Security; see Restrict Windows Remote Desktop connections to LAN only.

/windows | Aug 31, 2024


Subscribe or visit the archives.