Windows Server Remote Configuration Question

Reply Subscribe

Thread Tools

Search this Thread

Mar 31, 2010 | 12:59 PM

scoob_dood

Thread Starter

Scooby Regular

Joined: Jan 2002

Posts: 550

Likes: 0

From: London

Windows Server Remote Configuration Question

Looking for some expert advice/pointers ....

I'm trying to make configuration changes to about 50 Windows Servers (2000 and 2003), specifically I want to change the SNMP Security Configuration (part of the SNMP service) to allow a new Manager IP and add a new Community.

This is easy to do on 1 server via the Services MSC (shown above), but if I want to change this on 50 (maybe more) servers I was hoping to use something like a batch script from one server to configure all the other servers (thinking about the time taken to VNC/RDP, login, open all the windows and type in all the info leaves with a sick feeling!)

I have been experimenting with Sysinternals psservice, but I can't seem to find the appropriate documentation/syntax for this relatively complex config change. So far I have managed to view the config and start/stop the service but thats not even close ...

Code:

C:\PsTools>psservice \\***.***.***.*** -u ******* -p ******* config SNMP /accepteula

PsService v2.22 - Service information and configuration utility
Copyright (C) 2001-2008 Mark Russinovich
Sysinternals - www.sysinternals.com

SERVICE_NAME: SNMP
Enables Simple Network Management Protocol (SNMP) requests to be processed by th
is computer. If this service is stopped, the computer will be unable to process
SNMP requests. If this service is disabled, any services that explicitly depend
on it will fail to start.
        TYPE              : 10 WIN32_OWN_PROCESS
        START_TYPE        : 2  AUTO_START
        ERROR_CONTROL     : 1  NORMAL
        BINARY_PATH_NAME  : C:\WINDOWS\System32\snmp.exe
        LOAD_ORDER_GROUP  :
        TAG               : 0
        DISPLAY_NAME      : SNMP Service
        DEPENDENCIES      : EventLog
        SERVICE_START_NAME: LocalSystem
        FAIL_RESET_PERIOD : 0 seconds
        FAILURE_ACTIONS   : Restart     DELAY: 60000 seconds
                          : None        DELAY: 0 seconds
                          : None        DELAY: 0 seconds

Any thoughts/ideas/advice/pointers? Google has so far failed to yield any useful information ...

Cheers

- Jon

Mar 31, 2010 | 01:33 PM

phoenixgold

Scooby Regular

iTrader: (2)

Joined: Oct 2007

Posts: 348

Likes: 0

Group policy - either a server group specific policy or the default domain policy.

Mar 31, 2010 | 02:29 PM

scoob_dood

Thread Starter

Scooby Regular

Joined: Jan 2002

Posts: 550

Likes: 0

From: London

Quote:

Originally Posted by phoenixgold

Group policy - either a server group specific policy or the default domain policy.

Thanks - that's opened up some new areas to look at, but I don't have these servers in a domain, and I can't see how to push the required policy change to the server before refreshing it?

Quote:

The following registry subkeys that store configuration data for the SNMP service:

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Servic es\SNMP\Parameters\ValidCommunities

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Servic es\SNMP\Parameters\PermittedManagers

So I get that I need to change this on each remote server, just not sure how yet ...

Thanks

Jon

Mar 31, 2010 | 03:43 PM

LostUser

Scooby Regular

Joined: Oct 2005

Posts: 476

Likes: 0

If you have the changes to the registry exported to a .reg file then use PSexec (systinternals) to import the .reg file on the remote computer.

something like

psexec \\Remoteserver -s -i -d %windir%\regedit /s C:\snmp.reg

Mar 31, 2010 | 05:14 PM

scoob_dood

Thread Starter

Scooby Regular

Joined: Jan 2002

Posts: 550

Likes: 0

From: London

Quote:

Originally Posted by LostUser

Thanks.

In the end I went for:

Code:

C:\PsTools>psexec \\<ip address> -u Administrator -p <passwd> reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SNMP\Parameters\PermittedManagers /v 1 /t REG_SZ /d <ip_address> /f

and the same for the community too.

-- Jon