Subscribe to Windows IT Pro
April 22, 2002 12:00 AM

Remote Administration of Windows Server Systems

Windows IT Pro
InstantDoc ID #24548
Rating: (2)

Managing IIS Servers
Remember that if you're running Microsoft Internet Information Server (IIS) 4.0 on NT 4.0, Internet Service Manager (ISM) 4.0 can remotely manage any IIS server that it can access. If you need to manage Internet Information Services (IIS) 5.0, you have three options for remote Web server management. First, Terminal Services will work just fine and let you run the Microsoft Management Console (MMC) Internet Services Manager snap-in to manage all the available services. Alternatively, you can run Internet Services Manager (ISM) 5.0 from a local machine and manage other IIS 5.0 boxes, or you can configure a Web-based version of ISM 5.0 that lets you manage your IIS 5.0 servers through Internet Explorer (IE). You can find detailed instructions about remotely managing IIS 5.0 in the Microsoft article "HOW TO: Remotely Administer Internet Information Services 5.0 in Windows 2000" (http://support.microsoft.com/default.aspx?scid=kb;en-us;q308169).

Make Your Choice
Many basic Win2K and NT administrative tools are remote-able; that is, you can point them at other computers on your network. Need to monitor the performance of your main Microsoft SQL Server box? Aim Performance Monitor at the system, configure a few counters, and you can have a near-realtime view of that system. Don't be too profligate about hooking counters on your machines, however; if you do, you could pummel your network with extraneous data or affect the overall performance of the system you want to watch. Third-party tools have the advantage in this situation, but be sure to look before you leap: Win2K Server OSs have significant tools that can provide many remote administration benefits that don't require you to resort to third-party add-ons.

Remote-application management is a horse of a different color. Although the Microsoft server products tend to add functionality to the basic OS tools (e.g., custom Performance Monitor configuration files that install when you install Microsoft Exchange Server or SQL Server, instrumented counters), most third-party applications add specific requirements for remote administration. You might find that using Terminal Services is your best option to remotely manage any Win2K or later server because then any application's natively installed administration tools will be available locally.

No matter which remote administration path you choose, make the choice a corporatewide process. Maintaining multiple remote administration technologies adds significant—and unnecessary—complexity to your network environment and increases your network enterprise's vulnerability to attack.

Related Content:

ARTICLE TOOLS

Comments
  • temp
    8 years ago
    Jul 13, 2004

    We are require this software, if it is good then we buy a software.

  • temp
    8 years ago
    Jul 13, 2004

    How it is work?

  • Don Jones
    10 years ago
    Oct 30, 2002

    Regarding your comment about VNC security, I always recommend that machines running remote control software--even Terminal Services--be protected by a firewall that will let only authorized traffic access the machines. I've known many companies to deploy internal firewalls to protect their servers from internal users, ensuring that only file-sharing, printing, or other ports are allowed through, and VNC presents no exception to such precautions. Although VNC carries a higher performance hit than solutions such as the built-in Terminal Services, I've found it to be much better than third-party solutions such as Symantec's pcAnywhere. Nothing's perfect, of course. As you do, I use VNC frequently because it's definitely worth at least what you pay for it!

  • Bjorn Larsson
    10 years ago
    Oct 30, 2002

    David Chernicoff's Forefront: "Remote Administration of Windows Server Systems" (May 2002, InstantDoc ID 24548) and Don Jones's "Must-Have Remote Administration Tools" (May 2002, InstantDoc ID 24536) both mention using Virtual Network Computing (VNC) but fail to discuss some important concerns regarding its use:


    • VNC security--Out of the box, VNC is not secure because it allows connections from any IP address. By editing the AuthHosts registry entry, you can restrict access by IP address. I'd further recommend running RRAS on the VNC server and restricting access to VPN ports only, thereby ensuring that all communication to and from the system is encrypted.

    • Performance--VNC can have a significant effect on processor performance. Just open a command prompt and watch. Or, move the mouse in circles and see the process not only spike but stay elevated. Processor performance might not be a concern in some environments, but it certainly is in others.

    • Updating screen info--Depending on the interface, VNC occasionally has problems knowing which components to refresh.



    I use VNC frequently, especially in cross-platform environments (e.g., to manage Windows 2000 or Windows NT systems from Linux-based workstations), but understanding the trade-offs is important.

You must log on before posting a comment.

Are you a new visitor? Register Here

advertisement

advertisement

Windows is a trademark of the Microsoft group of companies. Windows IT Pro is used by Penton Media Inc. under license from owner.