MOAC 70-687 L13 RDP and PowerShell

8/10/2019 MOAC 70-687 L13 RDP and PowerShell

1/29

Lesson 13: Configuring

Remote ManagementMOAC 70-687: Configuring Windows 8


2/29


3/29

Using MicrosoftManagement Console

The shortcuts to various MicrosoftManagement Console (MMC) tools thatappear in Windows 8 are all configured to

manage resources on the local system. There are two ways to access a remote

computer using a Microsoft ManagementConsole (MMC) snap-in:

o Redirect an existing snap-in to another system

o Create a custom console with snap-ins directedto other systems

2013 John Wiley & Sons, Inc. 3


4/29

Redirecting a Snap-In A snap-in that is directed at a specific system

typically has a Connect To Another Computercommand in its Action menu.

Selecting this command opens a SelectComputer dialog box in which you can specifyor browse to another computer on the network.

Once you select the name of the computer

you want to manage and click OK, the snap-inelement in the scope pane changes to reflectthe name of the computer you selected.



5/29

Redirecting a Snap-In

The Select Computer dialog box in an MMC console



6/29

Creating aRemote Console

When you add a snap-in to a customconsole, you select the computer you wantto manage with that snap-in.

You can also add multiple copies of thesame snap-in to a custom console, witheach one pointed at a different computer.

This enables you to monitor the event logsfor computers all over the network from asingle console.



7/29

Using Remote Assistance Remote Assistance eliminates the need for

administrative personnel to travel to a userslocation for any of the following reasons:o Training

o Technical supporto Troubleshooting

To receive remote assistance, the computerrunning Windows 8 must be configured to use

the Remote Assistance feature by:o Using Control Panel

o Using Group Policy



8/29

Using Remote Assistance

The Remote tab of the System Properties sheet



9/29

Using Remote Assistance

The Solicited Remote Assistance policy in the GroupPolicy Object Editor console



10/29

Creating an Invitation To request a Remote Assistance session, a

client must issue an invitation and send it toa particular expert.

The client can send the invitation usingemail or save it as a file to be sent to theexpert in some other manner.



11/29

Creating an Invitation

The Use Remote Assistance to contact someone you trustfor help page in the Windows Remote Assistance wizard



12/29


The How do you want to invite your trusted helper? page inthe Windows Remote Assistance wizard



13/29


The Give your helper the invitation file and passwordpage of the Windows Remote Assistance wizard



14/29

Securing RemoteAssistance

An unauthorized user who takes control of acomputer using Remote Assistance can causealmost unlimited damage.

Remote Assistance is designed to minimize the

dangers. Some of the protective features ofRemote Assistance are:o Invitations

o Interactive connectivity

o Client-side controlo Remote control configuration

o Firewalls



15/29

Using Remote Desktop Remote Desktop is a remote control

program for Windows computers; there areno invitations and no read-only capabilities.

The Remote Desktop Connection clientcommunicates with a host computer usingthe Remote Desktop Protocol (RDP).

When you connect to a computer usingRemote Desktop, you must log on, just asyou would if you were sitting at the console.



16/29

Activating RemoteDesktop

Before you can connect to a distantcomputer using Remote Desktop, you muststart it using the controls on the Remote tab

of the System Properties sheet, which youaccess from the Control Panel.

Select the Allow remote connections to thiscomputer option and, depending on your

security needs, you can select the checkbox requiring Network Level Authentication.



17/29


18/29

Run the Remote Desktop Client

The Remote Desktop Connection dialog box



19/29


The General tab in the expanded Remote DesktopConnection dialog box



20/29


21/29


The Local Resources tab in the Remote DesktopConnection dialog box


U W d R


22/29

Using Windows RemoteManagement

Windows Remote Management is aWindows 8 service that enablesadministrators to execute commands onremote computers, using WindowsPowerShell or the Windows Remote Shell(WinRS.exe) command-line program.

Windows 8 does not start the service bydefault or configure the computer to allowremote management communications. Youcan configure this manually or throughGroup Policy settings.



23/29

Configure Remote Management

Starting the WinRM service



24/29

Configure Remote Management

Configuring a listener and firewall exception



25/29

Using Windows RemoteManagement

Windows Remote Management Group Policy settings



26/29

Using WinRS.exe Once you configure the Remote Management

service, you can execute commands on othercomputers that have been similarly configured.

To execute a command from the Windows 8command prompt, use the WinRS.exe program.

To use WinRS.exe, you frame the command youwant to execute on the remote computer:

winrsr:computer [-u:user] [-p:password]

command



27/29

Using WinRS.exe r:computer: Specifies the name of the computer on

which you want to execute the command, using aNetBIOS name or a fully qualified domain name (FQDN)

u:user: Specifies the account on the remote computer

that you want to use to execute the command p:password: Specifies the password associated with the

account specified in theu parameter. If you do notspecify a password on the command line, WinRS.exeprompts you for one before executing the command.

command: Specifies the command (with arguments)that you want to execute on the remote computer



28/29

Using WinRS.exe

Windows Remote Shell Group Policy settings



29/29

Using PowerShell

Remote Commands It is also possible to execute commands on

remote computers using WindowsPowerShell version 3, the version includedwith Windows 8.


Documents

MOAC 70-687 L13 RDP and PowerShell