Using Remote Management with Server Manager on Windows 7

Note: Remote management with Server Manager is available only in Windows Server 2008 R2.

Security considerations for remote management by using Server Manager 

You must be a member of the Administrators group on computers that you want to manage by using Server Manager.

Managing a remote computer from a computer that is running Windows 7…

  1. start the Windows Remote Management (WinRM) service to allow for the addition of trusted hosts:
  2. 0pen a cmd prompt session with elevated user rights
  3. enter net start winrm 

For remote connections in a Workgroup to Workgroup/Domain scenario…

Add the remote computer to the trusted hosts list on the source computer by 

  1. 0pen a cmd prompt session with elevated user rights
  2. winrm set winrm/config/client @{TrustedHosts=”RemoteComputerName”}

  For remote connections in a Workgroup to Workgroup/Domain scenario, if a user is not logged on by using the source computer’s built-in administrator account, the following WinRM registry key must be configured to allow remote access from the source computer. This change is required because of a User Account Control (UAC) limitation on non-administrator accounts that are members of the Administrators group. To change this registry key, run the following command on the source computer at a command prompt that is opened with elevated user rights.

reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System /v LocalAccountTokenFilterPolicy /t REG_DWORD /d 1 /f

By default, WinRM allows for a maximum of five connections to a remote computer to be active per user. To increase the limit, run the following command on the source computer, in which X represents the number of connections that you want to allow, at a command prompt that is opened with elevated user rights.

winrm s winrm/config/winrs @{MaxShellsPerUser=”X”}

Tasks that you can perform on a remote server by using Server Manager

  • View Windows automatic updating status
  • Run Best Practices Analyzer scans on roles. For more information, see Running and Filtering Scans in Best Practices Analyzer.
  • View or change Windows Customer Experience Improvement Program (CEIP) status
  • Configure Windows Error Reporting
  • View and manage roles from role home pages (Notes: To use role- or feature-specific tools or snap-ins in a Server Manager console that is connected to a remote server, those tools must be installed on the source computer by using Remote Server Administration Tools)
  • View Internet Explorer Advanced Security Configuration settings
  • Manage services from a role home page

Tasks that you cannot perform remotely by using Server Manager

Primarily to minimize security risks to your servers, the following tasks cannot be completed in a remote Server Manager session.

  • Add or remove roles, role services, and features
  • Configure Remote Desktop settings
  • Configure System Properties
  • Check for new roles
  • Change Windows automatic updating settings
  • Change network settings
  • Change the computer name or domain membership
  • Change Internet Explorer Advanced Security Configuration settings
  • Run the Security Configuration Wizard, if the source computer is a server that is running Windows Server 2008 R2

To set Group Policy for Server Manager remote management
To configure Server Manager remote management by using the Windows interface
To configure Server Manager remote management by using Windows PowerShell
Learn more…

Advertisements

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: