First, it should be noted that when Windows Server 2008 core edition is installed it has a blank Administrator password. The first time you log on you are prompted to change the password. Since Windows is completely locked down (the firewall is on and it is not in the domain) this does not pose a risk.
Drivers and Services
Security
- To add or remove users to or from the local Admin group you use the net localgroup command.
- To manage the event logs, you use the wevtutil command.
- To stop a process (kill) you use the taskkill command.
- Setting the administrator process can be performed by hitting control-alt-del and selecting change password, or it can be done from the command line using net user.
- Firewall administration is done using the netsh command.
Basic OS configuration
- Configuring the page file is done through the wmic pagefileset command.
- Automatic updates are configured using the SCRegedit script. Please note that if automatic updates are already configured through Group Policy you will get an error.
- Rebooting is done through the shutdown command.
- Changing the server name uses the netdom command, as is adding or removing a computer from the domain.
- IP address and IP options are done using the netsh command.
- Error reporting is done through the serverweroptin command
Features
Remote Access
- Remote administering a Core server can be done in a number of ways. You can RDP to the server, use WinRM to access the command line from another Windows 2008 or Vista machine or you can use the Server tools that are part of the adminpak (renamed to RSAT). Please remember to configure the firewall to allow your method of remote admin.
- To enable WinRM you will use the WinRM command.
|
Last modified at 2/19/2008 12:10 PM by Jarrod Katz - Admin
|
|