The following sections provide information that will help you effectively manage Remote Management sessions on Windows 2000/2003 servers:
You have several options for initiating a Remote Management session from ConsoleOne. They include the following:
In ConsoleOne, click
> > > .In the Remote Management dialog box, enter the IP address or the DNS name of the managed server.
Enter the agent password.
Select the Remote Management operation that you want to initiate with the managed server.
Click
.You can start a Remote Management session from the eDirectory (NDS) namespace (in ConsoleOne) using one of the following methods:
In ConsoleOne, select a managed server.
Click
> > > .In the Remote Management dialog box, select the IP address of the managed server from the
drop-down list.The IP address of the selected managed server is automatically populated to the
drop-down list.Enter the agent password.
Select the Remote Management operation that you want to initiate with the managed server.
Click
.You can also use the following procedure:
In ConsoleOne, right-click a managed server.
Click
.In the Remote Management dialog box, select the IP address of the managed server from the
drop-down list.The IP address of the selected managed server is automatically populated to the
drop-down list.Enter the agent password.
Select the Remote Management operation that you want to initiate with the managed server.
Click
.Before initiating a Remote Management session from the Atlas namespace (in ConsoleOne), make sure that the NetWare® Management Agent™ (NMA) is installed and the Discovery discovers the network topology.
To initiate the Remote Management session:
In ConsoleOne, right-click a managed server.
Click
> or .Select the IP address and enter the agent password.
The IP address of the selected managed server is automatically populated to the
drop-down list.Click
.If the managed server is configured behind dynamic NAT, the managed server cannot be accessed from the management console but the management console can be accessed from the managed server. To resolve this problem:
The user at the managed server must initiate a request for a Remote Management session to the remote operator by using the Request Session option.
IMPORTANT:Before initiating a Remote Management session from the Remote Management Agent, the remote operator must ensure that ConsoleOne is running on the management console.
NOTE:The first instance of ConsoleOne receives the request when a session request is initiated from a Remote Management Agent to the management console running on a terminal server. None of the ConsoleOne instances receive the session request until all ConsoleOne instances are closed on the session where ConsoleOne was launched for the first time. To receive the session request, ConsoleOne must be launched again on any terminal session.
To request for a session, the user at the managed server must do the following:
Right-click the
icon.Select
.Enter the IP address or the DNS name of the management console.
Select the
or operation from the drop-down list.Click
.The Remote Management Listener listens to the request and notifies the remote operator about it. The remote operator must accept the request and provide the following credentials for the request in the Select Authentication Mode dialog box:
Enter the password for authentication.
Click
.Windows XP SP2 comes with a firewall enabled by default. As a result, the Remote Control Listener running on Windows XP SP2 cannot receive connections initiated by the Remote Management Agent.
You need to configure the firewall settings to allow the Remote Control Listener to receive connections.
The Remote Control Listener binds to TCP port 1762 by default. In order to change the ports, refer to Configuring Remote Control Listener Port.
This section provides information on the following topics:
The Remote Management Agent port binds to TCP port 1761 by default. You may configure it to run on a different TCP port by following the steps mentioned below:
Open ZENworks_agent_directory\rmagent\rmcfg.ini file.
In the
section, set the to the desired port number.Restart the Novell ZENworks Remote Management Agent service.
To initiate a remote session to a managed server where the Remote Management Agent is running on any port other than 1761, do the following modifications on the management console:
Open the ConsoleOne_directory\1.2\bin\rmports.ini file.
In the
section, add the port number.NOTE:If the Remote Management Agents are running on different ports on different managed servers, you may mention the port numbers one below the other under the Remote Management Agent Ports section.
The Remote Control Listener port binds to TCP port 1762 by default when ConsoleOne is started. You may configure it to run on a different TCP port by following the steps mentioned below:
Open the ConsoleOne_directory\1.2\bin\rmports.ini file.
In the
section, set the to the desired port number.Restart ConsoleOne.
To initiate a remote session request to a management console, where the Remote Control Listener is running on any port other than 1762, the following modifications need to be done on the managed servers:
Open the ZENworks_agent_directory\rmagent\rmcfg.ini file.
In the
section, add the port number.NOTE:If the Remote Control Listeners are running on different ports on different management consoles, you may mention the port numbers one below the other in the
section.If the
option is selected in the Remote Management policy, the Request for Permission dialog box is displayed with the following default message:Do you want to allow console user to perform remote management operation?
ZENworks 7 with Support Pack 1 allows you to customize the default message displayed in the Request for Permission dialog box.
To customize the default message, do the following on the managed server:
Open the Registry Editor.
Traverse to HKEY_LOCAL_MACHINE\Software\Novell\ZENworks\RemoteManagement\ RMAgent and create a registry string in the name “PermissionMessage”.
Enter the message that should be displayed in the Request for Permission dialog box as the value of the registry string created in the previous step.
(Optional) In the registry string value, you can use the following parameters that will be dynamically replaced by valid information in the message:
Table 20-1 Parameters Used to Customize the Message of the Request for Permission dialog box
A sample registry string with parameters is as follows:
Do you want to allow %a to %r from the remote machine, %i?
The registry string is displayed as the following message in the Request for Permission dialog box:
Do you want to allow admin.novell to Remote Control from the remote machine,10.0.0.0?
After you have initiated a Remote Management session and selected Remote View as the operation, you have several options to help you view the managed server.
You can regulate the display of the Viewing window through using the control options.
To enable the control options:
Click the
icon, located at the top left corner of the Viewing window.Click
.To save the
settings, select the check box.The saved settings are implemented in the next Remote View session.
Click
.You can use accelerator keys to assign the shortcut keys to the control options and also to control the display of the Viewing window. Default accelerator key sequences are assigned to each accelerator key option. The Accelerator Keys dialog box displays the default key sequence in the edit field of each accelerator key option. You can define a custom accelerator key sequence to change the default sequence. For more information, see Defining a Custom Accelerator Key Sequence.
To enable the Accelerator Keys option:
Click the
icon, located at the top left corner of the Viewing window.Click
.Select
.Click
.To open the Accelerator Keys dialog box:
Click the
icon, located at the top left corner of the Viewing window.Click
.Table 20-2 explains the Accelerator Key options you can during the Remote View session:
Table 20-2 Accelerator Key Options for Remote View Session
The default keystrokes assigned to the accelerator key options are displayed in the edit field to the right of each accelerator key option in the Accelerator Keys dialog box. You can change the accelerator key sequence and define a custom accelerator key sequence if you do not want to use the default keystroke.
To define a custom accelerator key sequence:
Click the
icon, located at the top-left corner of the Viewing window.Click
.Click the
field of the accelerator key option where you want to define a custom accelerator key sequence.Press the new accelerator key sequence.
Click
.IMPORTANT:The shift keys are left-right sensitive, and are indicated in the Control Options dialog box as LShift and RShift. Avoid the use of standard key sequences like Ctrl+C, Ctrl+V, Shift+Del, etc.
After you have initiated a Remote Management session and selected Remote Control as the operation, you can control the managed server from the management console to provide user assistance and to help resolve server problems. With remote control connections, the remote operator can go beyond viewing the managed server to taking control of it.
You can effectively manage a Remote Control session by performing the following tasks with the Viewing window control options, the Viewing window toolbar buttons, and the Remote Management Agent icon options:
You can control the display of the managed server by using the Viewing window control options.
To enable control options:
Click the
icon, located at the top left corner of the Viewing window.Click
.Select the control options you want to enable for the remote session.
The following table explains the options you can use to control the display of the Viewing window.
To save the
settings, select the check box.The saved settings are implemented in the next Remote Control session.
You can use accelerator keys to assign shortcut keys to the control options and also to control the display of the Viewing window. Default accelerator key sequences are assigned to each accelerator key option. The Accelerator Keys dialog box displays the default key sequence in the edit field of each accelerator key option. You can define a custom accelerator key sequence to change the default sequence. For more information, see Defining a Custom Accelerator Key Sequence.
To enable the Accelerator Keys option:
Click the
icon, located at the top left corner of the Viewing window.Click
.Select
.To open the Accelerator Keys dialog box:
Click the
icon, located at the top left corner of the Viewing window.Click
.Table 20-3 explains the Accelerator Key options you can use to control the display of the Viewing window:
Table 20-3 Accelerator Key Options for Remote Control Session
Option |
Default Keystroke |
Description |
---|---|---|
|
Ctrl+Alt+M |
Applicable only if the color resolution settings on the management console and managed server are similar. Sizes the Viewing window to the size of your screen without window borders. |
|
Ctrl+Alt+R |
Refreshes the Viewing window. |
|
Ctrl+Alt+T |
Re-establishes the connection with the managed server. |
|
Ctrl+Alt+A |
Enables you to change the default accelerator key sequences. |
|
Left-Shift+Esc |
Closes the Viewing window. |
|
Alt+M |
Opens the Control Parameters dialog box. |
|
Alt+A |
Opens the Accelerator Keys dialog box. |
|
Alt + L |
Scans and renders the information of the entire screen. |
|
Ctrl+Alt+G |
Hides the scroll bars and scale the Remote Management window to fit your screen. |
|
Ctrl+Alt+S |
Passes Alt-key sequences on the management console to the managed server. |
|
Ctrl+L |
Locks the keyboard and mouse controls at the managed server. This option is available only if the Allow Locking User's Keyboard and Mouse option is enabled in the Server Remote Management Policy. |
|
Ctrl+Alt+B |
Blanks the screen at the managed server. This option is available only if theServer Remote Management Policy. option is enabled in the |
|
Ctrl+Alt+D |
Sends the Ctrl+Alt+Del keystroke to the managed server. Display the Security window on the managed server. |
|
Alt+R |
Invokes the menu on Windows server. |
|
Ctrl+T |
Switches applications on managed servers. |
Table 20-4 describes the toolbar options in the Viewing window:
Table 20-4 Viewing Window Toolbar Buttons
Button |
Default Keystroke |
Key Function |
---|---|---|
|
Ctrl+L |
Enabled only if the option is enabled in the effective Remote Control policy of the managed server.Blanks the screen at the managed server. When the remote operator selects this option, the screen of the managed server is be blacked out and the operations performed by the remote operator on the managed server are not visible to the user at the managed server. Not supported over certain display adapters. Refer to the ZENworks 7 Server Management Readme for the list of display adapters that do not support this feature. |
|
Ctrl+Alt+B |
Locks the keyboard and mouse controls at the managed server. When the remote operator selects this option, the user at the managed server will not be able to use the keyboard and mouse controls of the managed server. |
|
Alt+R |
Invokes the menu on the managed server. |
|
Ctrl+T |
Sends the Alt-tab key sequences to the managed server. Switches applications on managed servers. To switch the applications,
|
|
Ctrl+Alt+S |
Sets the system key pass to On or Off. Passes Alt-key sequences from the management console to the managed server. Certain key sequences such as Ctrl+Esc, Alt+Tab, Ctrl+Alt+Del, and Alt+PrintScreen are not allowed even when the System Key Pass-Through is set to On. However, you can use the toolbar buttons on the Viewing window for the Ctrl+Esc, Alt+Tab, and Ctrl+Alt+Del keystrokes. |
|
Ctrl+Alt+D |
Sends the Ctrl+Alt+Del keystroke to the managed server. Displays the Security window on the managed server. |
|
Ctrl+Alt+R |
Refreshes the viewing window. |
|
Alt+L |
Scans and renders the information of the entire screen of the managed server continuously. |
|
Ctrl+Alt+G |
Hides the scroll bars and scales the Remote Management window to fit your screen. |
|
|
Encryption is an optional feature and will be effective per session. If the saved configuration has the option enabled, the session will be encrypted from the start of the session. Encrypting a whole session provides greater security as the data transferred over the wire will be encrypted and it will be difficult to decipher anything meaningful even after the data over the wire is captured. However, it impacts performance slightly and is recommended when the security requirement is very stringent. |
You can define a custom key sequence if you do not want to use the default key sequence. For more information, see Defining a Custom Accelerator Key Sequence.
When the remote operator initiates a Remote Control session, any wallpaper displayed on the desktop of the managed server is suppressed. This feature reduces the response time from the managed server for requests from the management console because less traffic is generated over the network while the wallpaper is suppressed.
You can configure the control parameter for this option to change the default settings and enable the display of the wallpaper on the managed server. When you terminate the Remote Control session, the suppressed wallpaper will be restored.
To enable the display of suppressed wallpaper on the managed server:
Click the
icon, located at the top left corner, then click .Deselect the
option.By default, the
icon is displayed in the system tray of the Windows servers. This icon indicates that the Remote Management Agent is loaded on the managed server.The user at the managed server can right-click the
icon and choose from the following options:Table 20-5 Remote Management Icon Options
Option |
Description |
---|---|
|
Disconnects and closes the remote session on the managed server and displays a message on the management console indicating that the remote session is closed. |
|
Allows the user at the managed server to set or clear the password for the server. |
|
Displays information such as who is accessing the managed server for the remote session, security settings, and the protocol in use for the remote session. For details, see Obtaining Information About Remote Management Sessions. You can right-click or double-click the icon to view the Information window. |
|
This option is always dimmed on managed servers. To shut down the Remote Management Agent on managed servers, you must go to the Service Control Panel and stop the "Novell ZENworks Remote Management Agent” service. |
|
Enables the user at the managed server to request a remote operator to perform remote session. |
|
Displays the Remote Management Agent help. |
The user at the managed server can set an agent password. This password overrides the password set by the administrator during the ZENworks 7 Remote Management installation.
To set the agent password:
From the managed server, right-click the
icon.Click
> .Use a password of ten or fewer alphanumeric characters. The password is case sensitive and cannot be blank.
After the completion of the Remote Management session, you can clear the agent password. If you clear the agent password, the remote operator cannot perform the Remote Management operations.
To clear the agent password:
On the managed server, right-click the
icon.Click
> .Using the Information window, the user at the managed server can view details about the session, such as the name of the remote operator how is remotely managing the server, the security settings, and the protocol in use for the remote session.
To view information about remote sessions:
On the managed server, right-click the
icon.Click
.Click the
tab to view the general information and the tab to view the security information.See the following sections for details:
Table 20-6 explains the general information you can obtain about Remote Management sessions from the Information window:
Table 20-6 Remote Management Session General Information
The Security Information dialog box displays information based on the Remote Control and Remote View sessions.
Table 20-7 Remote Control and Remote View Session Security Information
The Remote Management Agent will display the identification of the remote operator in the following dialog boxes on the managed server:
Permission dialog box
Visible signal dialog box
The information displayed is console_machine_name\console_windows_username.
ZENworks Server Management records log information on a Windows managed server.
To view the audit log for Remote Management sessions:
Click
> > > .Click
> .Double-click the event associated with the source Remote Management Agent.
To view only the events pertinent to the Remote Management Agent, choose
from the drop-down list in the Filter dialog box.The Remote Management performance, especially over a slow link, has been enhanced through using improved compression.
The performance during a Remote Management session over a slow link or a fast link varies depending on the network traffic. For better response time, try one or more of the following strategies:
Select the
option on the managed server in the Control Parameters dialog box.Assign color settings on the management console higher than the managed server or assign the same color settings for the management console and the managed server.
Select
or mode in the Control Parameters dialog box to enhance the Remote Management performance.The speed of the management console depends upon the processing power of the client machine. We recommended that you to use single-processor client with a Pentium* III, 500MHz (or later).
Deselect the
option before starting the Remote Control or Remote View session.To disable Enable Pointer Shadow:
At the managed server, use a plain background. Do not set a wallpaper pattern.
If the Task manager is opened at the target machine, it is recommended to minimize or close it.
Make sure that the scrolling texts (such as the debug windows) and animations are not active on the managed server.
Make sure to minimize or close the dialog boxes that are not in use.
To perform any operations at the managed server, if possible, use the toolbar options instead of menu options.
To maximize the Remote Management performance over WAN, configure the following settings in the Control Parameters dialog box at the managed server:
Set the color mode of the managed server to
.Select the
option.The following sections explain how you can use the Remote Management Agent during remote sessions:
You can shut down the Remote Management Agent during a remote session. When you shut down the Remote Management Agent, the remote session stops. To start another remote session, you need to restart the Remote Management Agent. For more information, see Restarting the Remote Management Agent.
To shut down the Remote Management Agent on a Windows 2000/2003 managed server:
From the Control Panel, double-click
.Double-click
.Click
> .IMPORTANT:You can stop the Remote Management Agent on Windows 2000/2003 server only if you have the rights to stop the Windows service.
During ZENworks Server Management installation, the Remote Management Agent is installed on the managed server and started automatically when the managed server starts up. If you shut down the Remote Management Agent during a remote session, the remote session stops. To start another remote session, you need to restart the Remote Management Agent on the managed server.
To restart the Remote Management Agent on Windows 2000/2003 managed server:
From the Control Panel, double-click
.Double-click
.Click
> .IMPORTANT:You can start the Remote Management Agent on Windows 2000/2003 server only if you have the rights to start the Windows service.