Chapter 14: Remote Server Administration BAI617

Chapter Topics Configure Windows Server 2008 R2 servers for remote administration Remotely connect to Windows Server 2008 R2 servers using Remote Desktop Connection Configure a server for Remote Assistance Install the Remote Server Administration Tools

Remote Admin The day-to-day administration of any server rarely occurs at the server. Instead, administrators commonly connect to servers remotely Remote Desktop for Administration is the default implementation of Remote Desktop Services (RDS) on a Windows Server 2008 R2 server

Remote Desktop Remote Desktop for Administration allows you to connect to a server and do just about anything remotely that you could if you were physically at the server The two primary tools you’ll use are Remote Desktop Connection and Remote Desktop

Remote Desktop Reboots can be the one area of concern The primary limitation you have is if the remote system needs a reboot or restart. Although it is possible to reboot the system remotely, when you do so, you will be disconnected. If something prevents the system from rebooting, you won’t know what the problem is or be able to resolve it

Setting Up Remote Desktop

Don’t allow connections to this computer – Remote Desktop is disabled. Allow connections from computers running any version of Remote Desktop (less secure) – This will allow remote connections from clients that are using a version of RDC older than RDC6.0, which provides less security. This setting supports users connecting with Windows XP running the older RDC. Allow connections only from computers running Remote Desktop with Network Level Authentication (more secure) – This supports connections from clients using RDC 6.0 or newer. RDC 6.0 and newer is available on Windows Vista and Windows 7. RDC 6.1 can be installed on Windows XP systems with at least SP2 installed.

Remote Desktop Connection Tool

Remote Desktop Connection

Remote Gateway Servers RD Gateway is used to allow connections to an internal network via the Internet. When RD Gateway is enabled, users can connect to resources on an internal network from any Internet connected device. RD Gateway uses RDP over HTTPS through port 443 (regular Remote Desktop uses port 3389)

Remote Gateway Servers

Remote Assistance Remote Assistance is primarily a feature used on desktop systems and is not enabled by default on Windows Server 2008 R2 However, if you have a large organization with junior administrators in remote locations, it can be very useful to you The Remote Assistance check box in System Properties is grayed out and can’t be enabled until the Remote Assistance feature is added

Remote Assistance

Initiating a Remote Assistance Session Click Start, type msra in the Run box, and press Enter. The Windows Remote Assistance dialog box will appear. Click “Invite someone you trust to help you.” Click “Save this invitation as a file.” Browse to a location on your hard drive. The invitation file is named Invitation.msrcIncident by default but can be changed if desired. Click Save. A password is automatically created and can’t be changed. You’ll need to tell the helper this password. Send the invitation to a helper as an attachment, or place it on a share accessible to the helper.

Initiating a Remote Assistance Session

Remote Server Administration Tools The Remote Server Administration Tools (RSAT) are tools you need to manage roles and features on a Windows Server 2008 and Windows Server 2008 R2 server from your desktop operating system. RSAT includes tools like Active Directory Users and Computers (ADUC) and the DNS console

Review Configure Windows Server 2008 R2 servers for remote administration Remotely connect to Windows Server 2008 R2 servers using Remote Desktop Connection Configure a server for Remote Assistance Install the Remote Server Administration Tools

Questions?

Lab Environment