Manage Server Core

10/9/2010 3:57:49 PM
There are many ways to work with Server Core and manage the roles and features you have installed. One of them is to use a command prompt (either locally or through a remote connection), but that probably isn’t what you want to here. You are hoping for a GUI method.

Well, in addition to using the command-prompt directly, you can also connect through Terminal Services or through Windows Remote Shell, but again, this probably isn’t what you are looking for. You can also use remote Microsoft Management Console (MMC) snap-ins to manage Server Core systems in the same way you would use them to remotely administer other systems.

At this point, it should be obvious how to work with Server Core locally, so let’s consider some of the remote options.

Manage Server Core with Terminal Services

To connect to a Server Core system from a Terminal Services client, you have to enable Remote Desktop for Administration mode. You can do this on a Server Core system by typing the following at the command prompt:

Cscript c:\windows\system32\scregedit.wsf /ar 0

When this is complete (the screen says “Registry has been updated”), you can go to another system and open the Remote Desktop Connection program. (A quick way to do this if you are using Windows Vista is to run the mstsc.exe app from the Start menu’s instant search bar.) You can use the IP address or the name of the server running Server Core, make the connection, and log in. Ultimately, you will still be working with a command prompt, however (which is why we don’t have a figure here—it would simply be another command prompt).

Type logoff at the command prompt when you are finished.

Manage with TS RemoteApp

Now, something a little more modern than managing via Terminal Services, although ultimately with the same end result, is the use of TS RemoteApp to publish the cmd.exe application. With Windows Server 2008, you have the ability to publish a specific application without having users connect to the entire desktop. In the case of Server Core, this becomes logical because there is nothing happening on the desktop.

To enable this feature on your Server Core system, you need to perform the following steps:

On another Windows Server 2008 system, add the Terminal Services role through Server Manager.

Open the MMC and add the TS RemoteApp MMC snap-in.

Connect to the Server Core system.

From the Results pane, select RemoteApp Programs and locate the cmd.exe application (located at \\<ServerName>\c$\windows\system32\cmd.exe).

From the Allow list, click Remote cmd.exe and then Create RDP Package.

Use the RDP package to connect to the server that is running Server Core.

Manage with Windows Remote Shell

Using Windows Remote Shell to connect to a Server Core system requires you to know command-line syntax. You must first enable Windows Remote Shell on the Server Core system by performing the following steps:

Type WinRM quickconfig at the command prompt.

On another system, open a command prompt.

Use WinRS.exe to initiate all your commands to the remote Server Core system. For example, type winrs -r:<Server Core System Name> dir c:\windowsc:\windows directory information on your Server Core system.

to see the

At this point, you can perform any of the command-line tasks you normally would locally at the Server Core system but through the Remote Shell.

Manage Server Core with MMC Snap-ins

This is what you may have been waiting for throughout this chapter: the ability to manage Server Core through familiar GUI snap-ins for your MMC snap-ins.

To get started, make sure the Windows Firewall (if it is configured on the Server Core system) will allow an MMC connection. You can allow all snap-ins to connect or allow only specific ones.

To allow all snap-ins to connect, type the following:

Netsh advfirewall firewall set rule group="remote administration" new enable=yes

Allowing only specific snap-ins requires a bit more work. You type the following:
Netsh advfirewall firewall set rule group="<rulegroup>" new enable=yes


The reason this second method may require a bit more work is because the rule groups are outlined for some, but not all, snap-ins. Some snap-ins simply do not have a rule group, in which case enabling the groups for Event Viewer, Services, or Shared Folders will often be enough to allow other snap-ins to work. For this reason, unless you have a major security concern, it would be easier to simply enable all snap-ins.

Some of the MMC snap-ins and corresponding rule group names are listed here:

  • Event Viewer: Remote Event Log Management

  • Services: Remote Services Management

  • Shared Folders: File and Printer Sharing

  • Task Scheduler: Remote Scheduled Tasks Management

  • Reliability and Performance Monitor: Performance Logs and Alerts (and File Printer and Sharing)

  • Disk Management: Remote Volume Management

  • Windows Firewall with Advanced Security: Windows Firewall Remote Management

When you have the MMC configured on your Server Core system, you can begin managing with it, if you have the right credentials to do so. Another concern is whether the Server Core system is a domain member. If it isn’t, you have a little more work to do in order to connect.

So, to begin with, if you are managing a Server Core system that is part of the domain, you perform the following steps:

Open an MMC snap-in. (Choose an easy one to work with and a familiar one, such as Computer Management. Or you can type mmc at the Start instant search bar and open a blank console.)

Right-click the top-left part of the hierarchy and select Connect to Another Computer.

Type the computer name of the Server Core system.

Now you should be able to use the snap-in the same way you would any other remote system you work on.

If, however, the Server Core system is not a part of the domain, you have to create a connection credentially to the Server Core system from your client machine. To do that, type the following:

Open a command prompt on the client machine and type: cmdkey /add:<Server Core System Name> /user:<Administrator Account User Name> /pass:<Administrator Password>

You can now manage the Server Core machine as you would any other system in the domain.
  •  Configure Server Core Postinstallation
  •  Install Server Core
  •  Determine Your Need for Server Core
  •  Install Windows Server 2008
  •  Windows Server 2008 : Configure NAP
  •  Incorporate Server Core Changes in Windows Server 2008 R2
  •  Decide What Edition of Windows Server 2008 to Install
  •  Perform Other Pre-Installation Tasks
  •  Developing Windows Azure Services that Use SQL Azure
  •  Creating Windows with Mixed Content
  •  Mixing Windows and Forms
  •  Exploring an Assembly Using ildasm.exe
  •  The Assembly/Namespace/Type Distinction
  •  Communicate Between Two Machines on the Same Network (WCF)
  •  Communicate Between Processes on the Same Machine (WCF)
  •  Create a TCP/IP Client and Server
  •  Get Network Card Information
  •  Store Data when Your App Has Restricted Permissions
  •  Serialize to an In-Memory Stream
  •  Get the Paths to My Documents, My Pictures, Etc.
    Top 10
    Windows 7 : The Zune PC Software (part 4) - Using Zune - Working with Videos, Organizing Pictures
    Windows 7 : The Zune PC Software (part 3) - Using Zune - Rating Content, Working with Playlists
    Windows 7 : The Zune PC Software (part 2) - Using Zune - The Zune User Experience, Enjoying Music
    Windows 7 : The Zune PC Software (part 1) - Finding and Installing Zune, Configuring the Zune Software
    Windows 7 : Microsoft Zune - A Digital Media Alternative - Why Zune?
    Microsoft .NET : Design Principles and Patterns - Applying Requirements by Design (part 2) - Security
    Microsoft .NET : Design Principles and Patterns - Applying Requirements by Design (part 1) - Testability
    Silverlight Recipes : Controls - Applying Custom Templates to a DataGrid Cell
    Silverlight Recipes : Controls - Displaying Row Details in a DataGrid
    Experience Sennheiser HD700 Headphones
    Most View
    Buying Guide: CPU Cooling Equipment (Part 5) - Antec KUHLER H2O 620,Arctic Cooling Freezer i30,Cooler Master Hyper 612 PWM
    iClone 5 Pro
    Sharepoint 2010 : Creating Security Trimmed CRUD Operations on a SQL Database Using Visual Studio 2010
    SQL Azure : Building Two OData Consumer Applications (part 2) - Windows Mobile 7 Application
    Samsung Series 8 PS51D8000 3D Plasma TV
    Summer games
    Microsoft ASP.NET 3.5 : The HTTP Request Context - The global.asax File
    The best music apps for your iOS Device (Part 1)
    Kingston SSDNow V+ 200 - SSDs for The Budget Conscious
    Windows 7 : Protecting Your Data from Loss and Theft - Encrypted File System (part 1) - Encrypting Offline Files, Using CIPHER
    Tube amplifier for headphone review
    Unifying: Greatest Challenge
    The Best Apps and Gear of 2012 (Part 3)
    Social Networking Tips & Tricks (May 2012)
    MobileMe Gallery after iCloud
    HP Anti-glare Compaq LCD
    Dual-SIM Smartphone Galaxy Ace Duos – Battery Test
    Sharepoint 2007: Personal Sites and Personal Details (Available Only in MOSS)
    Advanced ASP.NET : Data-Access Components (part 2) - Using the Data-Access Component
    Dell S2740L - A Beautifully Crafted 27-inch IPS Monitor