Section 2.1. Essential Administration Tools

2.1. Essential Administration Tools

The essential administration tools every administrator must master are:

• AdminPak

• Support Tools

• Microsoft Management Console (MMC)

• Remote Desktop for Administration

• Remote Assistance

2.1.1. AdminPak

The administrative tools available on your system depends on its configuration. As services are added to a system, the tools needed to manage those services are installed. If you manage systems remotely, these same tools might not be available. To ensure you have a consistent tool set, you should install the Windows Server 2003 Administration Tools (AdminPak) on systems you use for administration by completing the following steps:

1. After you log on to the system using an account with administrator privileges, insert the Windows Server 2003 CD-ROM into the CD-ROM drive.

2. When the Autorun screen appears, click Perform Additional Tasks, and then click Browse This CD to start Windows Explorer.

3. Double-click I386, and then double-click Adminpak.msi to install the complete set of Windows Server 2003 management tools.

The AdminPak tools can be accessed from the command line and from the Administrative Tools menu.

2.1.2. Support Tools

In addition to the AdminPak, you'll want to install the Windows Server 2003 Support Tools on systems you use for administration. The Windows Server 2003 Support Tools extend the core set of administration tools to include additional useful utilities and commands that can be used for administration.

To install the support tools, complete these steps:

1. Log on to the system using an account with administrator privileges and insert the Windows Server 2003 CD-ROM into the CD-ROM drive.

2. When the Autorun screen appears, click Perform Additional Tasks, and then click Browse This CD to start Windows Explorer.

3. Double-click Support, and then double-click Tools.

4. Double-click Suptools.msi to start the Windows Support Tools Setup Wizard.

5. Click Next. Read the End User License Agreement. Click I Agree, and then click Next.

6. Enter your user information, and then click Next.

7. Accept the default install location (%ProgramFiles%\Support Tools).

8. Click Install Now. Click Finish.

The Support Tools can be accessed through the Tools Management Console. To start the console, click Start Programs Windows Support Tools Support Tools Help.

2.1.3. Microsoft Management Console

In Windows Server 2003, the primary administration tools are built using the MMC framework. At its heart are consoles and snap-ins. A console is a container window to which you can add functional components called snap-ins. You create custom administration tools by adding snap-ins to an empty console. Consoles can also include taskpads to create custom view tabs in the console. The custom view tabs can include shortcut links to menu items, shell commands, and Favorites links.

All consoles, including the standard administration consoles, have two basic modes:

Author

In Author mode, administrators can make changes to the console by adding or removing snap-ins, and creating task pads. Most MMCs can be put in Author mode by right-clicking the menu option and selecting Author, or by starting the console from the command prompt using the /a parameter. This opens the console for authoring.

User

In User mode, administrators can access the snap-in functions but cannot make changes to the console. All administrator consoles are in user mode by default. To switch from author mode to user mode in a console, click File Options, select the desired console mode, clear Do Not Save Changes To This Console, and then click OK. You can then save the updated console to its original location by clicking File Save or to a new location by clicking File Save As.

By default, consoles are set to work with the local computer when started. To work with a remote computer via the console, you'll need to right-click the console root node in the left pane and then select Connect To Another Computer. This displays the Select Computer dialog box, which you can use to specify the name or IP address of the remote computer.

2.1.4. Remote Desktop for Administration

Windows Server 2003 Terminal Services has two operating modes: Remote Desktop for Administration and Terminal Server. One way to think of the Remote Desktop for Administration is as a limited Terminal Server mode that enables administrators to establish remote connections. Each server configured with Remote Desktop for Administration can have up to two concurrent connections.

Remote Desktop for Administration can be enabled or disabled on a per computer basis on the Remote tab of the System utility under Control Panel. To enable this feature, access the System utility's Remote tab, select Enable Remote Desktop On This Computer, and then click Select Remote Users to specify users granted remote access permission via Remote Desktop. By default, any user that is a member of the Administrators group is granted this permission. If the computer is running a firewall, TCP port 3389 must be opened to allow remote access.

Remote Desktop connections can be established using the Remote Desktop Connection client found under Programs Accessories Communications or by using the Remote Desktops console found on the Administrative Tools menu. Use the Remote Desktop Connection client to manage one computer remotely. Use the Remote Desktops console to manage multiple computers remotely. Both Windows XP and Windows Server 2003 support remote desktop.

With Remote Desktop Connection, establish remote connections as follows:

1. Open the Remote Desktop Connection client and then click Options.

2. In the Computer field, type the name or IP address of the remote computer.

3. Enter your username, password, and domain information.

4. Enter display, resource, and other options using the other tabs as necessary.

5. Click Connect.

---

Tip: Troubleshooting Remote Desktop connectivity is discussed in "Troubleshoot Terminal Services," later in this chapter.

---

With Remote Desktops, establish remote connections as follows:

1. Open the Remote Desktops console.

2. Right-click Remote Desktops in the console tree and select Add New Connection.

3. Type the name or IP address of the remote computer in the field provided.

4. Enter an optional Connection Name.

5. Enter your username, password, and domain information.

6. Click OK to close the Add New Connection dialog box.

7. In the left pane, expand the Remote Desktops node to show the defined connections.

8. Click a connection.

2.1.5. Remote Assistance

Remote Assistance allows a user to send an invitation to a more experienced user or administrator asking for troubleshooting help with a computer problem. The helper accepting the request can view the user's desktop, transfer files, and chat with the user needing help through a single interface.

Both Windows XP and Windows Server 2003 support Remote Assistance, which can be enabled or disabled using the Remote tab of the System utility under Control Panel. To enable Remote Assistance, access the System utility's Remote tab, select Turn On Remote Assistance, and then click OK. You can click the Advanced tab to set the maximum amount of time the invitations can remain open.

By default, the user or administrator accepting a remote invitation can remotely control the computer from which the invitation was sent during the remote assistance session. Typically, this is the desired behavior.

The easiest way to make a remote assistance request is to use Windows Messenger. In Windows Messenger, click Actions Ask for Remote Assistance, and then select the helpers Windows Messenger account when prompted. The helper then receives an instant message and can click Accept to accept the remote assistance invitation. The user seeking assistance then confirms it is OK to start the remote assistance session by clicking Yes.

Another way to send a remote assistance invitation is to use Help And Support Center. Click Support on the toolbar. Under the Support heading, click Get Remote Assistance, then in the right pane, click Invite Someone To Help You.