Solved

Windows Server 2012 - Accessing server manager remotely.

Posted on 2014-04-10
12
5,290 Views
Last Modified: 2014-05-01
Good afternoon,

I seem to be having some issues with being able to access Windows Server 2012 'Server Manager' remotely on other instances across our network.

Looking at the settings, it seems to be in place on the OS ie the RPC service is running on all the servers. I have tweaked with the network and can now get the server manager from a remote server to connect to another instance, downloading the status, but still getting Sync issues.

Does anyone know the TCP/UDP ports which are required to be open for this to work?

Thanks in advance for any help provided.
0
Comment
Question by:ccfcfc
  • 6
  • 5
12 Comments
 
LVL 80

Expert Comment

by:David Johnson, CD, MVP
ID: 39991257
sync issues?  are you referring to server manager not updating? or Active Directory Sync issues?
0
 
LVL 17

Expert Comment

by:Brad Bouchard
ID: 39992111
Forgive me if you've already gone through this, but have you read:  http://technet.microsoft.com/en-us/library/hh831456.aspx

?
0
 

Author Comment

by:ccfcfc
ID: 39993710
Yeah, well ive now think Ive got the servers talking OK as they have the status now in server manager:

'Online- Verify WinRM 3.0 service is installed, running and required firewall ports are open'.

I know for certain the that Win RM service is running on each server (as theyre running the same image) and are set to 'started', and have opened the default port (tcp - 5985).

Something is making me believe, there is either a port missing on the firewall to allow-in, or something is not configured correctly?

thanks
0
Free eBook: Backup on AWS

Everything you need to know about backup and disaster recovery with AWS, for FREE!

 

Author Comment

by:ccfcfc
ID: 39998647
Has anyone got any ideas at all on how I can get this resolved please?
0
 
LVL 17

Accepted Solution

by:
Brad Bouchard earned 500 total points
ID: 39999155
If you are managing a remote computer from a computer that is running Windows 7, start the Windows Remote Management (WinRM) service to allow for the addition of trusted hosts. Open a Command Prompt session with elevated user rights by clicking Start, clicking All Programs, clicking Accessories, right-clicking Command Prompt, and then clicking Run as administrator. Type the following, and then press Enter: net start winrm
For remote connections in a Workgroup to Workgroup/Domain scenario, the remote computer must be added to the trusted hosts list on the source computer. To do this, run the following command on the source computer in a Command Prompt window that is opened with elevated user rights.
winrm set winrm/config/client @{TrustedHosts="RemoteComputerName"}

Per this:  http://technet.microsoft.com/en-us/library/dd759202.aspx

Although that's for 2008, try it on 2012 and see.
0
 

Author Comment

by:ccfcfc
ID: 39999315
I there, thank you for your email.

I keyed the recommended command into CMD (as administrator), as recommended, and still having the same issue. instead of using the hostname, I used the IP address of the device I would like to allow.

When keying in the command, I received the following response:

C:\Windows\system32>winrm set winrm/config/client @{TrustedHosts="IP_address"}
Client
    NetworkDelayms = 5000
    URLPrefix = wsman
    AllowUnencrypted = false
    Auth
        Basic = true
        Digest = true
        Kerberos = true
        Negotiate = true
        Certificate = true
        CredSSP = false
    DefaultPorts
        HTTP = 5985
        HTTPS = 5986
    TrustedHosts = 10.25.5.8
0
 
LVL 17

Expert Comment

by:Brad Bouchard
ID: 39999380
   DefaultPorts
        HTTP = 5985
        HTTPS = 5986
    TrustedHosts = 10.25.5.8

Based on this, can you see if Windows Firewall (if it's on) is allowing these through, and if it's off then make sure your firewall/router on your network isn't blocking anything internal.
0
 

Author Comment

by:ccfcfc
ID: 40001176
Hi Brad,

thank you for your response.

I can confirm that Windows Firewall is turned 'off' using GPO across the domain. I have allowed 10.25.5.8 to talk to all servers across the network on the following TCP ports:
49152 - 65535
135
2535
5986
5985

Is there any other port I am missing does anyone know of?

Kind regards
0
 
LVL 17

Expert Comment

by:Brad Bouchard
ID: 40001617
but still getting Sync issues.

Can you elaborate on these?
0
 

Author Comment

by:ccfcfc
ID: 40003536
Brad,

Apologies, I am now able to get server manager to see remote servers as 'Online' but unable to do anything such as see any event logs, install features etc remotely.

I get the feeling there is a few more ports I may need to open? Or maybe there something I need to turn on each servers OS?

Thanks
0
 
LVL 17

Assisted Solution

by:Brad Bouchard
Brad Bouchard earned 500 total points
ID: 40004296
No worries.  I was able to find (after extensive searching) this link, which I feel may be the missing piece for us.  Give it a look and make sure you've fulfilled all requirements.

http://technet.microsoft.com/en-us/library/hh921475.aspx
0
 

Author Closing Comment

by:ccfcfc
ID: 40034051
Hi there, I think the issue might lie with the set up of WinRM.

Thank you for the diagnostic pages. They're were much appreciated.

thanks
0

Featured Post

Don't miss ATEN at NAB Show April 24-27!

Visit ATEN at NAB Show to learn how our "Seamlessly Entertaining" solutions deliver fast, precise video streaming without delays for the broadcasting and media environment. ATEN will showcase its 16x16 Modular Matrix Switch (VM1600) and KVM Over IP Solution (KE6900 series).

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Search Windows logs for IP Address 10 48
Change password Windows 10 computers 11 61
Office/Outlook 365 Deployment on Windows 2012 RDS 7 75
Application timeout 4 39
What to do when Windows Update is not working correctly? What tools can I use to detect the cause of the malfunction problem? What does this numeric error code mean? These and other questions that you have been asking in the past are answered here (…
You might have come across a situation when you have Exchange 2013 server in two different sites (Production and DR). After adding the Database copy in ECP console it displays Database copy status unknown for the DR exchange server. Issue is strange…
In this Micro Tutorial viewers will learn how to restore single file or folder from Bare Metal backup image of their system. Tutorial shows how to restore files and folders from system backup. Often it is not needed to restore entire system when onl…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

756 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question