Guide Sshwindows Unattended

Hi,

I spent a few days trying to install sshwindows (from sshwindows.sourceforge.net). Well had some problems but now I get it, so I thought I sould share it.

This will give local ssh access to "administrator" from any ip address (SO, BE CAREFULL!!!).

1) Download it from:

sshwindows.sourceforge.net

2) Install it, ignore the passwd and group warning at the end.

3) Copy the installed file from c:\program files\openssh to your cd at:

$OEM$\$PROGS\OpenSSH

4) Delete all these files that start with ssh_host_

here: $OEM$\$PROGS\OpenSSH\etc\

You should have delete these 6 files:

ssh_host_key

ssh_host_key.pub

ssh_host_rsa

ssh_host_rsa.pub

ssh_host_dsa

ssh_host_dsa.pub

5) You need to allow ssh through the winxpsp2 firewall, so add these lines to your winnt.sif:

[WindowsFirewall]

Profiles = WindowsFirewall.Standard

LogFile = "%SYSTEMDRIVE%\logs\pfirewall.log"

LogSize = 4096

LogDroppedPackets = 1

LogConnections = 1

[WindowsFirewall.Standard]

Type = 3

Mode = 1

Exceptions = 1

Notifications = 1

MulticastBroadcastResponse = 0

PortOpenings = WindowsFirewall.SSHD

[WindowsFirewall.SSHD]

Protocol = 6

Port = 22

Name = OpenSSHD

Mode = 1

Scope = 1

(I hope I didn't make a mistake now, as I made a modified cut and paste from my original settings).

You may skeep this firewall entries and add this to a batch file if you want:

netsh firewall add portopening tcp 22 openssh

6) My cmdlines.txt launches a batch file to execute the runonce stuff. Here are the ssh runonceex.cmd lines:

REG ADD %KEY%\02 /VE /D "Activating OpenSSH (SECURITY)" /f

REG ADD %KEY%\02 /V 1 /D "cmd /c start /I /wait %SYSTEMDRIVE%\progra~1\openssh\activate.cmd"

(it wrapped the second line, it needs to be in one line!!!)

7) Save the file activate.cmd in (see attachment OpenSSH.rar):

%OEM%\$PROGS\OpenSSH

8) An finally save the file settings.reg (see attachment OpenSSH.rar), in

%OEM%\$PROGS\OpenSSH

Now reboot (IT IS NECESSARY TO REBOOT!!)

Voilà, ssh to your machine

P.S. Do not use cmdow in your batch file or ssh-keygen will fail, as it needs an output window!!!!

If you combine ssh tunneling with realvnc and/or rdp you have very secure remote access!

Hope this helps, if not, post your comments or questionsundefined