Windows Server Remote Configuration Question

Reply Subscribe

Thread Tools

Search this Thread

31 March 2010, 12:59 PM

scoob_dood

Scooby Regular

Thread Starter

Join Date: Jan 2002

Location: London

Posts: 550

Likes: 0

Received 0 Likes on 0 Posts

Windows Server Remote Configuration Question

Looking for some expert advice/pointers ....

I'm trying to make configuration changes to about 50 Windows Servers (2000 and 2003), specifically I want to change the SNMP Security Configuration (part of the SNMP service) to allow a new Manager IP and add a new Community.

This is easy to do on 1 server via the Services MSC (shown above), but if I want to change this on 50 (maybe more) servers I was hoping to use something like a batch script from one server to configure all the other servers (thinking about the time taken to VNC/RDP, login, open all the windows and type in all the info leaves with a sick feeling!)

I have been experimenting with Sysinternals psservice, but I can't seem to find the appropriate documentation/syntax for this relatively complex config change. So far I have managed to view the config and start/stop the service but thats not even close ...

Code:

C:\PsTools>psservice \\***.***.***.*** -u ******* -p ******* config SNMP /accepteula

PsService v2.22 - Service information and configuration utility
Copyright (C) 2001-2008 Mark Russinovich
Sysinternals - www.sysinternals.com

SERVICE_NAME: SNMP
Enables Simple Network Management Protocol (SNMP) requests to be processed by th
is computer. If this service is stopped, the computer will be unable to process
SNMP requests. If this service is disabled, any services that explicitly depend
on it will fail to start.
        TYPE              : 10 WIN32_OWN_PROCESS
        START_TYPE        : 2  AUTO_START
        ERROR_CONTROL     : 1  NORMAL
        BINARY_PATH_NAME  : C:\WINDOWS\System32\snmp.exe
        LOAD_ORDER_GROUP  :
        TAG               : 0
        DISPLAY_NAME      : SNMP Service
        DEPENDENCIES      : EventLog
        SERVICE_START_NAME: LocalSystem
        FAIL_RESET_PERIOD : 0 seconds
        FAILURE_ACTIONS   : Restart     DELAY: 60000 seconds
                          : None        DELAY: 0 seconds
                          : None        DELAY: 0 seconds

Any thoughts/ideas/advice/pointers? Google has so far failed to yield any useful information ...

Cheers

- Jon

Reply Like

31 March 2010, 01:33 PM

phoenixgold

Scooby Regular

iTrader: (2)

Join Date: Oct 2007

Posts: 348

Likes: 0

Received 0 Likes on 0 Posts

Group policy - either a server group specific policy or the default domain policy.

Reply Like

31 March 2010, 02:29 PM

scoob_dood

Scooby Regular

Thread Starter

Join Date: Jan 2002

Location: London

Posts: 550

Likes: 0

Received 0 Likes on 0 Posts

Quote:

Originally Posted by phoenixgold

Group policy - either a server group specific policy or the default domain policy.

Thanks - that's opened up some new areas to look at, but I don't have these servers in a domain, and I can't see how to push the required policy change to the server before refreshing it?

Quote:

The following registry subkeys that store configuration data for the SNMP service:

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Servic es\SNMP\Parameters\ValidCommunities

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Servic es\SNMP\Parameters\PermittedManagers

So I get that I need to change this on each remote server, just not sure how yet ...

Thanks

Jon

Reply Like

31 March 2010, 03:43 PM

LostUser

Scooby Regular

Join Date: Oct 2005

Posts: 476

Likes: 0

Received 0 Likes on 0 Posts

If you have the changes to the registry exported to a .reg file then use PSexec (systinternals) to import the .reg file on the remote computer.

something like

psexec \\Remoteserver -s -i -d %windir%\regedit /s C:\snmp.reg

Reply Like

31 March 2010, 05:14 PM

scoob_dood

Scooby Regular

Thread Starter

Join Date: Jan 2002

Location: London

Posts: 550

Likes: 0

Received 0 Likes on 0 Posts

Quote:

Originally Posted by LostUser

Thanks.

In the end I went for:

Code:

C:\PsTools>psexec \\<ip address> -u Administrator -p <passwd> reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SNMP\Parameters\PermittedManagers /v 1 /t REG_SZ /d <ip_address> /f

and the same for the community too.

-- Jon

Reply Like