How to deploy or reconfig tightVNC service for the remote user to authorize the connection

Hi all,
In my environment : Windows Active Directory Domain, tightvnc service (msi installer 2.7.10) is deployed on workstations that joined domain with GPO. TightVNC service is deployed automatically through a script like this :
-----------------------------------------------------------------------------------------------------------------------------------------------------------
@echo off
if %processor_architecture%==AMD64 GOTO AMD64
if %processor_architecture%==x86 GOTO x86
GOTO ERR
:AMD64
                rem 64 bit
                if exist "C:\Program Files\TightVNC\tvnserver.exe" GOTO installed
                GOTO install64
:x86
                rem 32 bit
                goto install32
:installed
                rem TightVNC installed
                GOTO end
:install32
                rem start installing TightVNC 32 bit
                msiexec.exe /qn /norestart /i \\192.168.7.5\Software\GPO\TightVNC\tightvnc-2.7.10-setup-32bit.msi SET_USEVNCAUTHENTICATION=1 VALUE_OF_USEVNCAUTHENTICATION=1 SET_PASSWORD=1 VALUE_OF_PASSWORD=****** SET_VIEWONLYPASSWORD=1 VALUE_OF_VIEWONLYPASSWORD=****** SET_USECONTROLAUTHENTICATION=1 VALUE_OF_USECONTROLAUTHENTICATION=1 SET_CONTROLPASSWORD=1 VALUE_OF_CONTROLPASSWORD=******
                GOTO end
:install64
                rem start installing TightVNC 64 bit
                msiexec.exe /qn /norestart /i \\192.168.7.5\Software\GPO\TightVNC\tightvnc-2.7.10-setup-64bit.msi SET_USEVNCAUTHENTICATION=1 VALUE_OF_USEVNCAUTHENTICATION=1 SET_PASSWORD=1 VALUE_OF_PASSWORD=****** SET_VIEWONLYPASSWORD=1 VALUE_OF_VIEWONLYPASSWORD=****** SET_USECONTROLAUTHENTICATION=1 VALUE_OF_USECONTROLAUTHENTICATION=1 SET_CONTROLPASSWORD=1 VALUE_OF_CONTROLPASSWORD=******
                GOTO end
:ERR
@echo unsupport architecture
GOTO end
:end
----------------------------------------------------------------------------------------------------------------------------------------------------------
Everything works fine. Now I have just read this article https://www.pointdev.com/en/faq/faq-ideal-administration-accept-connection-authorize-connection-querytimeout-querysetting-id-464.html
I recognize that I can make TightVNC service on workstations display or popup a notification to users so they can know that someone (IT guys) want to remote control to their workstation.
How can I specify Authorizartion Degree of paranoia (QuerySetting) in my script ? I tried google but I cannot find exact configuration option.
Can I edit joined domain workstations TightVNC setting (which TightVNC service is installed as above) with msiexec.exe + msi installer + GPO to achieve my purpose ?
Please give me some advice, thank you very much.
Disclaimer: This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited. Thank you!

___________________________________________________________
TightVNC mailing list, [email protected]
To change your subscription or to UNSUBSCRIBE, please visit
https://lists.sourceforge.net/lists/listinfo/vnc-tight-list