Your network contains an Active Directory domain named adatum.com. The domain contains a server named
Server1 that runs Windows Server 2012.
On a server named Corel, you perform a Server Core Installation of Windows Server 2012.
You join Corel to the adatum.com domain.
You need to ensure that you can use Event Viewer onServer1 to view the event logs on Core1.
What should you do on Core1?
A.
Run the Disable NetFirewallRulecmdlet.
B.
Install Remote Server Administration Tools (RSAT).
C.
Install Windows Management Framework.
D.
Run the Enable-NetFirewallRulecmdlet.
D
0
0
D
0
0
D, but on 2008 R2 or older you would have to enable-psremoting first (which is enabled on default on 2012 and afterwards)
Full command would be something like:
Set-NetFirewallRule -DisplayGroup ‘Remote Event Log Management’ -Enabled
(with Enter-PSSession ran first)
0
0
Remote view Event Viewer
Set-NetFirewallRule -DisplayGroup ‘Remote Event Log Management’ –Enabled
MMC (Microsoft Management Console) uses DCOM not WinRM
to view Event logs you should also enable Remote Event Log Management rules.
– COM+ Network Access (DCOM-In)
– Remote Event Log Management (NP-In)
– Remote Event Log Management (RPC)
– Remote Event Log Management (RPC-EPMAP)
*** Power Shell ***
Set-NetFirewallRule –name ComPlusNetworkAccess-DCOM-In –enabled True
Set-NetFirewallRule –name RemoteEventLogSvc-In-TCP –enabled True
Set-NetFirewallRule –name RemoteEventLogSvc-NP-In-TCP –enabled True
Set-NetFirewallRule –name RemoteEventLogSvc-RPCSS-In-TCP –enabled True
Enable one MMC at a time
Enable-NetFirewallRule -DisplayGroup “Remote Administration”
Event Viewer – Remote Event Log Management
Services – Remote Service Management
Shared Folders – File and Printer Sharing
Task Scheduler – Performance Logs and Alerts, File and Printer Sharing
Disk Management – Remote Volume Management
Windows Firewall with Advanced Security – Windows Firewall Remote Management
0
0
thanks mate!!! drifter for explaining in detail..
0
0