And this video will talk about enabling ISIS remote management to use power show I've already mentioned
how to enable ISIS remote management on Windows Sora.
But we've done it with graphical user interface.
But what if you want to enable ISIS remote management on Nanna's server or core server or if you don't
have a possibility to access graphical user interface on the server it could be useful when you host
many sorrows in different locations or in the cloud.
And it is much more efficient as it can be applied to multiple servers at once.
When doing it with power show the remote.
So we've done this through the graphical IRS manager before and as you remember there are several steps
to the process when you use power shall you follow the same steps.
But a few of them are tricky because come on let's don't exist to help with all the steps.
So here is the general process I'll follow.
First create a power shell session to each of the servers.
Second step install the management servers.
The third one is to enable the management service.
Then we'll start the Management Service which is W M as we see service and then will connect to you
then the IRS manager and using self signed certificate in my examples I'll enable remote management
on two IRS servers.
Core addition there will be core 1 and Core 2 and all at the same time.
So first let's great powers shall remote in sessions to the web servers.
The first step is to create power shall remote and to the core one and core to service.
I'll start by great a wearable servers that calls the computer names of the web servers.
You can also fill this variable with a CSP file or text file if your web servers are an active directory
you can filter you then get a computer command left to get the target's server names so I'll type doula
character servers equals in quotes then create a power show remote insertion to the servers you then
new P.S. session and will also create a wearable sessions for resource use later with the invoke mount
command lad so will type doula character assertions equals new peer session compute computer name and
will use servers variable.
Now we are ready to start configuring the remote management capability on those servers so we're getting
to the step to the IRS management service in an additional role service that you'll need to install
to enable their remote management using their remote sessions in their sessions variable.
Make this easy will type in work command dashed session sessions variable dash script block and the
command itself in coral braces will type will open curly brace type install Windows feature vamp dash
MGM GMT dish service and close the coral embrace this will install the windows feature on two servers
imagine the power of power shell you can do this on one hundred Soros or thousand throws at a time with
one simple command.
So once the rules services installed it still must be enabled.
There aren't any command letters to help enable the service so we'll show you a tip how to use the registry
and we are all switching to the step 3 enabling the management servers so the default settings.
When you first enable the management servers are set to permit windows credentials using or at 81 72
the default set and also create and apply a temporary self signed certificate.
In many cases especially for internal management these set ups are fine including the self signed certificate
but you can also replace the self signed certificate if you need to.
You can replace it with a trusted certificate if it is a production environment and you need more security.
I'll show the commands later on how to do this but for now let's enable the management service or shell
remote and aren't really the set item proper to command led to change the registry key enable remote
management will type invoke command session sessions variable script block and again and coral embraces
set item proper to pass each key local machine software Microsoft Web Management Server and the name
is enable remote management the value of this key should be one so it'll turn on this key know the management
services enabled and the service must still be started before it can be used to the connection point
for your local graphical IRS manager so we are switching to the step 4 starting the management service
start in the remote management service which is w am as we see is easier is power shell but there is
a small detail overlooked by many people that will cause problems later there w a mess.
This is service had a startup type of manual which means if you're a booth a server in future the remote
management will fail to fix this first set the start up type to automatic and then start the service.
I'll do this with the invoke command again will type invoke command session sessions variable script
block again in curly braces set server's name w am as we see startup type automatic this command will
change the start up type of manual to automatic and the next command is involved command session sessions
variable script block and in curly braces.
Start service W M as we see at this point the management services run it and you can remotely manage
the web servers using the graphical AI as manager so let's switch over to domain controller DC 1 and
at least 2 servers to our graphical IRS manager I'll launch server manager on DC 1 go to Tools click
on information internet information services manager right click on start playing and click connect
to a server here I have to specify core 1 Accept self server signed certificate and that said I'll do
the same as core to server
I live right click start page and repeat all the steps to add the server to my eye as management manager.
Now I can use sales manager to create sites create add applications at virtual directories and so on
now if you want to replace the self signed certificate let's say you obtained a certificate from a trusted
provider or active directory certificate services for internal management.
Then you have to export the certificate to a dot peer effects file with a password and then you can
use the native saw to your tool command to install the new certificate to perform this section.
You have to run the following steps with the help of power shell again.
First you have to Corp is a certificate to the remote web servers then use search your tool to install
the certificate after the certificate is installed.
It's important to remember to delete the DOT affects file of the web servers.
You'll do this with a remove item command.
Then you have together some print of the installed certificate and change the binding for the management
service.
To do this you'll need the IRS provider so you'll have to get the press provider and must close the
web administration module on the remote server.
You'll do this with input module web administration command.
The next step is together cert some print to make a new binding.
Then you'll remove the alters the cell binding and add then the US to sell binding you that the certificate
some print.