1. Chapter 14: Remote Server Administration BAI617

2. Chapter Topics Configure Windows Server 2008 R2 servers for remote administration Remotely connect to Windows Server 2008 R2 servers using Remote Desktop Connection Configure a server for Remote Assistance Install the Remote Server Administration Tools

3. Remote Admin The day-to-day administration of any server rarely occurs at the server. Instead, administrators commonly connect to servers remotely Remote Desktop for Administration is the default implementation of Remote Desktop Services (RDS) on a Windows Server 2008 R2 server

4. Remote Desktop Remote Desktop for Administration allows you to connect to a server and do just about anything remotely that you could if you were physically at the server The two primary tools you’ll use are Remote Desktop Connection and Remote Desktop

5. Remote Desktop Reboots can be the one area of concern The primary limitation you have is if the remote system needs a reboot or restart. Although it is possible to reboot the system remotely, when you do so, you will be disconnected. If something prevents the system from rebooting, you won’t know what the problem is or be able to resolve it

6. Setting Up Remote Desktop

7. Don’t allow connections to this computer – Remote Desktop is disabled. Allow connections from computers running any version of Remote Desktop (less secure) – This will allow remote connections from clients that are using a version of RDC older than RDC6.0, which provides less security. This setting supports users connecting with Windows XP running the older RDC. Allow connections only from computers running Remote Desktop with Network Level Authentication (more secure) – This supports connections from clients using RDC 6.0 or newer. RDC 6.0 and newer is available on Windows Vista and Windows 7. RDC 6.1 can be installed on Windows XP systems with at least SP2 installed.

8. Remote Desktop Connection Tool

10. Remote Desktop Connection

12. Remote Gateway Servers RD Gateway is used to allow connections to an internal network via the Internet. When RD Gateway is enabled, users can connect to resources on an internal network from any Internet connected device. RD Gateway uses RDP over HTTPS through port 443 (regular Remote Desktop uses port 3389)

13. Remote Gateway Servers

14. Remote Assistance Remote Assistance is primarily a feature used on desktop systems and is not enabled by default on Windows Server 2008 R2 However, if you have a large organization with junior administrators in remote locations, it can be very useful to you The Remote Assistance check box in System Properties is grayed out and can’t be enabled until the Remote Assistance feature is added

15. Remote Assistance

17. Initiating a Remote Assistance Session Click Start, type msra in the Run box, and press Enter. The Windows Remote Assistance dialog box will appear. Click “Invite someone you trust to help you.” Click “Save this invitation as a file.” Browse to a location on your hard drive. The invitation file is named Invitation.msrcIncident by default but can be changed if desired. Click Save. A password is automatically created and can’t be changed. You’ll need to tell the helper this password. Send the invitation to a helper as an email attachment, or place it on a share accessible to the helper.

18. Initiating a Remote Assistance Session

21. Remote Server Administration Tools The Remote Server Administration Tools (RSAT) are tools you need to manage roles and features on a Windows Server 2008 and Windows Server 2008 R2 server from your desktop operating system. RSAT includes tools like Active Directory Users and Computers (ADUC) and the DNS console

22. Review Configure Windows Server 2008 R2 servers for remote administration Remotely connect to Windows Server 2008 R2 servers using Remote Desktop Connection Configure a server for Remote Assistance Install the Remote Server Administration Tools

23. Questions?

24. Lab Environment