Windows Remote Administration

Topics Methods that Facilities uses for administering machines Methods that Facilities uses for administering machines Tools for remote administration / automation: Tools for remote administration / automation: Computer Management (compmgmt.msc) WMI and WMIC Scripting

Current Rollout Projects Windows XP Service Pack 2 Windows XP Service Pack 2 –Kclient upgrade to KfW –OpenAFS upgrade Updates are applied to a group of ten machines at a time, completion date of 6/2005 Monthly Patch Updates (ongoing) Monthly Patch Updates (ongoing)

What we do – Group Policies Deliver default Firewall settings for XP SP2 Deliver default Firewall settings for XP SP2 Push software, XP SP2, Kclient / OpenAFS upgrade packages Push software, XP SP2, Kclient / OpenAFS upgrade packages Configure security for Xwin32, Time server for Leash (new ticket manager) Configure security for Xwin32, Time server for Leash (new ticket manager) Configure Event Log settings, other security settings (NoNetAsAdmin, for example) Configure Event Log settings, other security settings (NoNetAsAdmin, for example)

Tools Stock Microsoft administration tools, methods are used (Remote desktop, etc) Stock Microsoft administration tools, methods are used (Remote desktop, etc) Some tools are installed by default, others added via resource kit, support tools (form the OS install CD) Some tools are installed by default, others added via resource kit, support tools (form the OS install CD) Administrative Shares (x$,admin$,etc) Administrative Shares (x$,admin$,etc) Custom tools written in Vbscript Custom tools written in Vbscript Windows Management instrumentation Windows Management instrumentation

Built-in tools MMC Based snap ins, roll your own tools MMC Based snap ins, roll your own tools Some are advertised via Control Panel -> admin tools, some are not (Certificate manager for example) Some are advertised via Control Panel -> admin tools, some are not (Certificate manager for example) Computer Management (compmgmt.msc) Computer Management (compmgmt.msc) Administrative rights required Administrative rights required Demo Demo

Why Remote Desktop ? Built-in to all recent versions of Windows Built-in to all recent versions of Windows Port blocked at border router (3389) Port blocked at border router (3389) Next best thing to being there (console access) Next best thing to being there (console access)

Tip for using compmgmt.msc Batch File: Batch File: Start Computer Management (target machine): start compmgmt.msc /computer:%1

WMIC Windows Management Instrumentation – Microsoft’s implementation of WBEM. Windows Management Instrumentation – Microsoft’s implementation of WBEM. Pre-cooked objects for obtaining information about a machine(s) Pre-cooked objects for obtaining information about a machine(s) Gather information about Disks, partitions, Motherboards, memory DIMMS, etc. Gather information about Disks, partitions, Motherboards, memory DIMMS, etc. Start / kill services, processes, etc Start / kill services, processes, etc Demo Demo

Windows Scripting Host Supports Vbscript, Jscript, Perl,.Net Supports Vbscript, Jscript, Perl,.Net Programmatically access WMI namespace, other object models (ADSI, CDO, etc.) Programmatically access WMI namespace, other object models (ADSI, CDO, etc.)

Cheat Sheets Will make available after this session …

Webcasts / Resources Using WMIC for administration: Scripting WMIC: Scripting Guys Webcasts: Scripting Start Page: