Basic Remote Management/Netowrk Secutity

Okay well here is some basic information about Remote network Management In Windows Xp/2000.

I have been messing around with some items in XP and 2000 and this is what i have came up with.
NOTE: The below bolded words are commands that can be used in command prompt.

[COMMAND PROMPT]
NET VIEW
-----------------Displays ComputerNames that have Folders/Printers shared on your Network
-----------------Example:
-----------------\\INTERN1
-----------------\\INTERN2
-----------------\\INTERN3

NBTSTAT -A <computername>
-----------------Store ComputerName's IP address in Cache

NBTSTAT -C
-----------------Displays Cached IP addresses
-----------------EXAMPLE:

Quote:

.................NetBIOS Remote Cache Name Table

....Name............................Type...............Host Address.........Life [sec]
....------------------------------------------------------------
....INTERN1.........<20>......UNIQUE..........208.0.125.137.......600

TELNET
-----------------Displays TELNET interface
-----------------While In TELNET TYPE "o <IN ADDRESS>" to remotely connect to PC
-----------------Once connected through TELNET you can use the NET commands to share folders and manage the computer.
-----------------TELNET will act just like regular COmmand Prompt. All command that you use on you computer can be executed on the other pc. EXAMPLE: MKDIR TEST

MMC
-----------------ADD A SNAP-IN and select to connect to another computer NOTE: Use ComputerName
-----------------SNAPINS:
-----------------SERVICES - Allows you to start and stop services on a remote machine. Start TELNET service for ability to connect through TELNET.
-----------------DISK MANAGEMENT - YOu can use this to magage drive and so fourth. FUN: By right clicking on CD-ROM and selecting Eject you can open their cd rom.
-----------------LOCAL USERS AND GROUPS - This can be used to add/remove a group or user to/from another computer.
-----------------EVENT VIEWER - Will display all logged error and reports on that computer.

SHUTDOWN
-----------------Shutdown -s -t <seconds> -m <\\PCNAME> -c <comment(no spaces)>
-----------------NOTE: Replace "-s" with "-r" to restart PC or "-L" to logoff.

-----------------------------------------------------------------------------------------------------
===================How to use these=========================
-----------------------------------------------------------------------------------------------------

IN Command Prompt-----
C:\> Net View

Displays Computer Names, Select the one you wish to connect to EXAMPLE: "\\INTERN1"

C:\> MMC

Displays The MMC GUI

With XP Select "FILE" MENU, Select "ADD/REMOVE SNAPIN", Click "ADD" button, DOUBLE CLICK on "SERVICES", CHOSE "ANOTHER COMPUTER", TYPE The Computername (\\INTERN1), PRESS "FINISH" , PRESS "CLOSE", and PRESS "OK".

Notice the SERVICES now availible in the side menu. Click on it. IN the Right Hand WIndows a list of Services will be displayed along with their status. To change a status, double click on one. For now we will select TELNET. A new window should popup, and you should see a few buttons such as "Start" and "Stop". GO ahead and CLick Start. Now the TELNET service should be started on the other pc.

Now to connect to it through TELNET.

C:\> NBTSTAT -A <computername>

Will Display NBTSTAT Information

C:\> NBTSTAT -C

Next to the computername that you entered should be an IP Address.... Remember that Address.

c:\> TELNET

Display TELNET dialog

Microsoft Telnet> o <IP ADDRESS>

Now your connected. You can use all dos commands such as DIR, MKDIR, CD, and so fourth. Also the NET commands come quite in handy when connected.

C:\> <-----------SHOULD BE DISPLAYED

--------------------------------------------------------------------------------------------
====================================================
--------------------------------------------------------------------------------------------

I'm quite new at the whole remote administration procedure so if you have any ideas or suggestions please post it.

great introduction to commands prompt commands and using basic net bios functions, thanks spools :D

Very good post. Just wanted to add one thing about the shutdown command. The only way that works remotely is if either everyone is allowed to shutdown the PC or you have a duplicate account on two different PC's. For security I recommend that you have it to where only a certain user be able to shutdown the computer remotely. To do this go to the group policy editor(type gpedit.msc in the run prompt) and navigate to this directory: computer configuration>windows settings>security settings>local policies>user rights assignment
and change the "force shutdown from remote system" to have the user you want to be able to shut it down remotely. Then go to www.systernals.com and download the psshutdown utility. This will allow you to specify a username and password for a remote shutdown.

its not necessary to get a machines ip addy to telnet to it. you can use the mach name itself.

Sweet, thanks

for remote administration telnet does't allow you to access network folders from the remote. so if you needed to copy files onto the remote you could either ftp or use psexec from systernals. simply "psexec \\<remote_mach> -s cmd" this will give you a shell on the remote that can access network drives, but you can't use console apps like ftp. for that you need telnet. the whole suite of tools from systernals is real handy to have especially if you like working from the command line. you dont need the gpedit to be set to "allow remote shutdown" to reboot the machine. using pskill, "pskill \\remote_mach services" will reboot a win2k machine. "pskill \\remote_mach svchost" will re-boot xp. one thing on ftp'ing using telnet. because its started in the shell, if you close the shell (telnet session) you stop the transfer.

Another handy cmd line tool to know about is AT. with this you can schedule tasks to run at a specified time.

at hh:mm <[path] app>

or

psexec \\<remote_mach> at hh:mm <[path] app>