Get your server issues fixed by our experts for a price starting at just 25 USD/Hour. Click here to register and open a ticket with us now!

Author Topic: Remotely Managing Windows 2008 Server Core Firewall  (Read 2465 times)

0 Members and 1 Guest are viewing this topic.

sajugovind

  • Guest
Remotely Managing Windows 2008 Server Core Firewall
« on: December 07, 2013, 10:21:36 am »
In Windows Server 2008, Server Core installation does not include the traditional full graphical user interface (GUI). Therefore, once you have configured the server, you can only manage it locally at a command prompt, or remotely using a Terminal Server connection. A third management option is to manage the server remotely using the Microsoft Management Console (MMC) or command-line tools that support remote use.

Step #1: Enable remote management through the firewall

On your Server Core machine, at a command prompt, type the following:

netsh advfirewall set currentprofile settings remotemanagement enable

This will allow you to control the Firewall's settings from a remote MMC snap-in.

You can always run the following command in order to disable this option:

netsh advfirewall set currentprofile settings remotemanagement disable


Step #2: Open the Windows Firewall snap-in

    1.On a remote computer running Windows Server 2008 or Windows Vista, click Start > Run, then type MMC and press ENTER.
    2.Click File > Add/Remove Snap-in.
    3.In the Add or remove snap-ins, scroll down till you find the Windows Firewall with advanced security snap-in.
    4.Click Add, then in Another Computer, type the name or IP Address of the Server Core server you want to manage.
    5.After a short loading, if all is ok, you will be presented with the management GUI of the remote server.     
    6.You can now create new Firewall rules, enable or disable existing rules, export your settings or disable the Firewall altogether. For example, to enable the rule allowing Remote Desktop connections to the Server Core, go to Inbound Rules. In the results pane scroll down till you find Remote Desktop (Tcp-in), right-click it and choose Enable. Note: You can read more about enabling RDP connections on my "Managing Windows 2008 Server Core through RDP" article.   Another example would be to enable ICMP Echo Replies (or simply put – Ping replies) from the Server Core server, allowing the administrators to test for connectivity issues with the server. To enable the rule allowing ICMP Echo Replies from the Server Core, go to Inbound Rules. In the results pane scroll down till you find File and Printer Sharing (Echo Request – ICMPv4-In), right-click it and choose Enable.

Pings to the Server Core server should now work.

You can save the current MMC window for future use. As long as you do not change the settings on step #1, or change the server's IP Address (if you've used an IP Address to connect to it in the first place), it should continue working for as long as you want.

Summary

Running Server Core requires manual control of many settings, and without proper Firewall configuration you may find it hard to remotely connect to it. This article showed you how to configure the Server Core server in order to remotely connect and configure the Windows firewall component.