VNC屏幕分区权限配置需求咨询

Hey there, let's break down how to get this specific VNC setup working for your OT supervision computer. Your need to split the remote desktop into a read-only upper section and an interactive lower navigation area is totally doable with the right tools or workarounds:

• Go with enterprise-grade VNC tools for built-in region controls
  Tools like RealVNC Enterprise Edition natively support screen-region-level access permissions. On your OT supervision PC, you can configure the VNC server to restrict remote input to only the lower HMI navigation area. You'll just need to define the exact pixel coordinates of that lower section (e.g., set the allowed Y-axis range from your navigation area's top pixel to the bottom of the screen, with full X-axis width). Any clicks or inputs outside this range will be blocked, keeping the rest of the HMI view read-only.

• Open-source workaround if you prefer free tools
  If commercial software isn't an option, you can try a hybrid setup with open-source VNC (like TightVNC) plus window management tweaks. First, check if your HMI software lets you detach the navigation panel into a standalone, always-on-top window. Then, configure the VNC server to only accept input for that specific window—this will effectively make the rest of the desktop read-only. Note that this depends on your HMI's flexibility, so it might take some testing to get right.

• Critical OT security reminders
  Since this is for an OT network, don't skip security steps: always use encrypted VNC connections (enable SSL/TLS in your VNC server settings) or route traffic through a secure VPN. Double-test your permission rules to make sure remote users can't access or modify any critical supervision controls outside the navigation area.

Hope these options help you lock in the exact access control you need for your HMI system!

备注：内容来源于stack exchange，提问作者Fabrice_D