Block NVR guest users from audio access?

[patric]

Going round-and-round with support on this... they keep sending a link to a different device on how to create a guest user, while completely missing the question: How can you block audio access from a guest user?
Im looking at the NV4108E-HS as well as NV5208E. The literature says "There is a total of 98 rights that can be assigned to a user" but doesnt document them or their use.

[Revo2Maxx]

In a NVR there is no right to access or not access a cameras Audio. Main reason is once the camera is enabled with audio it is on and will playback recorded footage and live view with audio on. If you have an area that required video with out audio but also require audio for normal master user then this would require 2 cameras being setup and access to the lower accounts no audio camera..

Also depending on what FW you are using you might want to use caution to who you are giving access to on the HS models. With the newer FW newest one that isn't under the listing but is listed from 2021 you will want to make sure if you only want your users to have access to some live feeds and some playback only then newest FW is best while using a USER account. Don't make any ADMIN accounts that you don't want to have way more info then you really want them to have even on newest FW because you can use Zero Channel to view on what the real admin account is doing at the NVRs GUI..

[Revo2Maxx]

Add on to what I already said. There are some things that you can do to help with other admin accounts if you have to have others on your machine. 1 setup admin accounts to access the NVRs GUI and then setup in your network area a list of IPs that have access to your NVR over the WebUI or over phone app. This way there is nothing that can be seen from master account using Zero Channel from a remote computer.. Then setup your users with static IPs in thier computers connected to your local area network that are not in the granted access list and if they were to try to gain access to the NVR over WebUI or App it would be denied.

[patric]

Is "Zero Channel" documented somewhere?

[Revo2Maxx]

No, But I did make a Video over a couple of years ago to warn others of this. Not many cared or nothing was done at the time. So a year ago I made a couple of other videos with some updated Info. 1 was I thought it was only related to V4 Firmware and after opening up my back up OLD Stock 4018E-HS to replace the 4108-HS that I gave Pogo, I found that the issue was even with the older V3 Firmware. So here are a couple of Videos showing what I am talking about. The first video is using P2P on the app AVP as a USER again this is on older V3 firmware. As I said on the FW of 2021 that flaw is gone as a uSER account but can still be seen under an Admin account..

https://www.youtube.com/watch?v=aWn6DOxESCc

This video is using WebU access again as a USER account... Audio isn't as loud in this video
https://www.youtube.com/watch?v=RwhQY_sWFv8

This is showing video of my 4216E-AI NVR with the Flaw Video made 2 years ago.
https://www.youtube.com/watch?v=6ndnI5Fobpo

I think the first time I posted about this issue was longer then 2 years ago, However When I changed my mind about making it Public I deleted the first non public video seeing only way to gain access to it was from my post anyway. I also talked with another youtuber that does videos for Dahua products that has a larger base and he also created a video on the topic showing the issue with Dahua based products. Now when I showed him the issue he went a step more to show the other flaw that I also have posted a video about. That I posted 3 or more years ago. That is keeping your system logged in. Just wanted to share that as well.. Also 1 last thing you might want to be aware of. Older FW you can shut system down by remote and it will sit on the wait screen telling you to power off the unit. At that time the system is no longer going to record and if someone isn't at the GUI say you are on vacation and someone you gave access to your device menat to log out but used shut down. YOu can still access WebUi and P2P over AVP and ASP however the system is no longer recording events. This is a way someone could shut your system down break into your garage and steal your prized car or Zero Turn and then turn the system back on by doing a Reboot via remote and system comes back to working as expected. So when you come home and system is still on but missing footage good luck with Insurance claim..
https://www.youtube.com/watch?v=dXB4uNngf-M

[Revo2Maxx]

Here is another video using my 4216EW-AI NVR and P2P on AVP phone app. This one shows what one can do by seeing the pattern.

https://www.youtube.com/watch?v=6ndnI5Fobpo

I did find some more but you get the point.

[Revo2Maxx]

Had someone ask, So thought I would mention this, The 4108-A2 NVR don't offer a Zero Channel, So for anyone that is looking to buy a new NVR and finds a NEW Old Stock HS on the fence about what they should buy. If you want to have multi users and don't want to worry about having the Zero Channel issue with installed FW or any FW besides the newest one. Then go with the A2 model..

Keep in mind there is still 1 issue that needs to be addressed.. That is the issue with the Ability to Shut Down the NVR from Remote.. There is NO REASON TO EVER HAVE THE ABILITY TO SHUTDOWN BY REMOTE!!!!!!!!!! PERIOD!!!!!!!!!

Besides that issue the A2 is a great NVR.. The update to the HS line. Provides AI channels to AI cameras..

Be Safe
James