First Look

In August we discussed how to set up a subscription to the event log logging data from The Windows Vista or Windows Server 2008 computer to another place. Some configuration Subscribe to involve the Windows Remote Management (winrm) services on all affected machines.

This month, we will see a little depth winrm also winrs, Microsoft two new tools, leveraging Windows remote management services, and how they may change our management of our servers and workstations.

Remote employees winrm is an integral part of Windows hardware management, and as a based on Web Services Configuration and control mechanism enumeration data in a Vista or Server 2008 machines. A SOAP-based agreement is in line with the open standards WS management agreements winrm is Microsofts new tools, open standards-based air pollution index for systems management.

If you are already familiar with VBScript, then you may be familiar with Windows management tools (WMI library) for each database has a residence window Since the Windows NT machines. WMI in this database is most of the hardware and software configuration machines, including video card information card information, installed software and documentation, and connect the printer. All This made up for the computer hardware and software in their presence WMI technology shops.

Almost all the management tools, you buy a little more convenient, that is, skin work with WMI technology, they took the information to help administrators and to change the configuration. VbScript and powershell scripters can do a lot of the same work, because these tools through the creation of scripts to promote and update data.

Winrm enhance this capability, the application connects to the use of WMI is a standards-based agreement will be much easier through the firewall. Winrm action must pass operation SOAP request over TCP port 80 is basically as a HTTP request. Because of this, the system needs to be in the demilitarized zone management can do is to open only a single port in the firewall. Winrm also includes helper code winrm audience share to 80 ports, and the illegal immigrants, or any other application may need to use the port .

Worried that if this function security administrators in you, you winrm can be configured for various types of certification before the completion the requested action. Basic digestion, Kerberos, etc., and even the client certificate-based authentication refers to the normal system, you can be within the jurisdiction of management security. Despite how certified configuration, although that winrm whether to expand the attacks of any system, it is enabled. Therefore, do your homework, and then it.

Most of this new flexibility will be used by developers building systems management software. Winrm new capabilities will enable those software manufacturers, to enrich their software with better management ability with the support of the firewall . Exposure script, but also, giving the scripters in the conference room capacity, and then the end of its existing firewall script with a more friendly winrm methods and properties.

For the rest of us, winrm there is a command-line tool that can provide data enumeration and manipulation from the command line. This tool, winrm.cmd, provided us with a number of command-line capability to access data from our stores WMI needs complex scripts and dozens of lines of code.

Winrm is not enabled by default. So use it relates primarily to invoke its rapid configuration entered winrm quickconfig In "br> command prompt. As I wrote in August, the long-range order to activate Windows management services, and configure it to automatically (delayed start). If the firewall As to the machines, then let a firewall winrm excluded from the traffic. Finally, it has created an audience to accept incoming remote management traffic.

Once opened, you can use the command list winrm.cmd information the machine. For example, to obtain the general performance of the computer, enter: winrm be wmicimv2/win32_operatingsystem this command is only helpful inventory computer network because it provides more than 60 of the operating system, including the recent boot, free physical and virtual memory, and the installation of the operating system dates. Would like to know the specific situation of the processes running on the remote computer? Try: winrm be wmicimv2/win32_process - than R: (remote host) you can get the specific details of the return and the process is running at the remote including the host country, the establishment of it, the performance characteristics and command line that launched the process. Digging a little deeper command syntax, you will find that orders are starting

Remote stability I must honestly, the command structure for winrm is not all that easy to customary to, which is why the greatest use of this new feature will be by the developer.

But a useful tool, using winrm may be a great help to system administrators: winrs.

Similar to the operation of the former sysinternals psexec tool, winrs lever Windows remote management, allows you to launch the process of remote machines. Where it is different from psexec because it can easily pass through firewalls in the same way as winrm. For example, if you want to find the IP information a remote machine, you can launch remote ipconfig with all machines running use this script: winrs - than R: (remote host) ipconfig - all another simple use winrs software can be installed when the remote system.

If you would like to apply for the use of secretly installed MSI files to a remote machine, use the following syntax. Grammar assumption that MSI files have been deposited Group C: folder.

Winrs - than R: (remote host) msiexec.exe / IC: install.msi / quiet Although a limited right to use now , these two tools, it would be possible greater use of a large number of servers in 2008 may not be the core of the console device at the scene. The main question, these two tools, it is their almost complete lack of document. Help files are fairly good for the submarine, most especially with winrm.

Also focus on in this space, however, as Microsoft moves further toward a comprehensive command line management capability for each an integral part of the Windows operating system. This is not the last time you heard of winrm and winrs.