Server Management and Monitoring - MCTS Guide to Microsoft Windows Server 2008 Active Directory Configuration - page 545

• Windows Firewall with Advanced Security —Manage firewall settings on Server Core
remotely by entering the following command (setting the Remote Administration rule first
isn't necessary):

netsh advfirewall set currentprofile settings remotemanagement
enable.

Activity 13-13: Configuring the Firewall
for Remote Management

Time Required: 15 minutes
Objective: Configure the firewall for remote management.
Description: You prefer to perform some Server Core configuration tasks with an MMC snap-
in, so you must configure firewall rules on the server to allow remote management.
1. Log on to the domain from ServerCoreXX as Administrator and open a command prompt
window, if necessary.
2. At the command prompt, type netsh advfirewall firewall set rule group="Remote
Administration" new enable=yes and press Enter .
3. Log on to ServerXX as Administrator. Click Start , type mmc in the Start Search text box,
and press Enter .
4. In the MMC console, click File , Add/Remove Snap-in from the menu. In the Add or Remove
Snap-ins dialog box, click Computer Management , and then click Add .
5. To manage your Server Core computer remotely, click the Another computer option button
and click Browse . In the Select Computer dialog box, type ServerCoreXX , click Check
Names , and then click OK . Click Finish , and then click OK .
6. In the MMC console, click to expand Computer Management and System Tools , and then
click Event Viewer . After a few minutes, you can view the event logs on ServerCoreXX.
7. Click to expand Shared Folders , and then click Sessions . You should see that Administrator
is currently connected from ServerXX, reflecting your current connection with
ServerCoreXX.
8. Click Reliability and Performance . You can monitor resource use on ServerCoreXX.
9. Click to expand Services and Applications , and then click Services . You can view and change
the status of services on ServerCoreXX.
10. To use Device Manager and Disk Management remotely, you must follow the instructions
for these snap-ins described previously. Close the MMC. When prompted to save console
settings, click No .

13

Additional Server and Active Directory Tools
You have seen that command-line tools can be helpful alternatives to GUI tools when repetitive tasks
must be performed and when you're working with Server Core. Many tools have been discussed
throughout this topic, such as Dsadd, Dsmod, and Dsmove to manage Active Directory objects in
Chapter 5. This section lists additional tools for managing a Windows Server 2008 environment:
• Bcdedit —For those familiar with the Boot.ini file, Windows Server 2008 and Vista have a
surprise for you. The boot configuration file is no longer an easy-to-use text file but a file
referred to as the boot configuration data store. To display and modify this store, you use
the Bcdedit command-line program.
• Dsacls —Display or modify Active Directory object permissions (ACLs).
• Dsdbutil —Perform database maintenance on AD DS and AD LDS data stores.
• Dsmgmt —Manage Active Directory LDS partitions, manage and control FSMOs, and
clean up metadata from discarded AD LDS instances.