Tuesday 17 November 2009

Windows 2008 Server Core enabling remote management

This is part of a series of bloggs written while installing Windows 2008 SBS Premium as VMs on Hyper-V.


Remote management of Windows Server 2008 Core from  a Windows Vista Workstation.
Microsoft recomendation is not to have the windows core/hyper-v server in the same domain as the Virtual Machines (VMs) so I leave the hyper-v server and managment workstation in a workgroup. The Vista workstation must be at least Service Pack 1.


If you may wish to create a seperate management domain for core server and managment workstation rember to do so before setting the firewall rules. Firewall rules are lost when the server is moved from a workgroup to domain.


Reboots are required after some steps ... still to update the documentation.


Configuring firewall rules on Core and Vista
netsh advfirewall firewall set rule group="Remote Administration" new enable=yes
netsh advfirewall firewall set rule group="Remote Volume Management" new enable=yes


last command needs to be run on Vista workstation as well make certain that the command prompt has been elevated to admin.


sc config vds start= auto (note the space is reqired between = and auto)
net start vds


Hyper-V server and client in same workgroup or DCOM Remote Access enabled
On the client run the following
cmdkey /add:targetname  /user:user_name  /password:user_password
cmdkey /delete:targetname
(cmdkey not avaliable on XP but windows 2003 version can be installed ... will blog this later)

DCOM Remote Access
If the hyper-v server is in a different workgroup or domain that the client ... setting DCOM Remote Access permission on the client.
  • Run DCOMCNFG
  • In the Component Services dialog box, expand Component Services, expand Computers, and then right-click My Computer and click Properties.
  • In the My Computer Properties dialog box, click the COM Security tab.
  • Under Access Permissions, click Edit Limits.
  • In the Access Permission dialog box, select ANONYMOUS LOGON name in the Group or user names box. In the Allow column under Permissions for User, select Remote Access, and then click OK.

No comments:

Post a Comment