Microsoft Windows Server 2008 Administration in .NET

Creator ANSI/AIM Code 39 in .NET Microsoft Windows Server 2008 Administration

The Features snap-in provides a consolidated view into all the features installed on the server Each installed feature and subfeature is listed here You can either add or remove features by selecting the appropriate link in the upper-right corner to launch the Add Feature or Remove Feature Wizard

The Diagnostics snap-in brings together the Event Viewer, Service Manager, Reliability and Performance tools, and Device Manager that were available in the old Computer Management console The Event Viewer has been improved significantly You can still access your typical Windows event logs, but application- and service-specific logs are newly added In addition to being able to view your Windows and application event logs, you can also create custom views This goes far beyond the filters that were available in previous versions to filter through event logs Custom views allow you to consolidate queries

3:

across one or more Windows logs and define criteria to refine what is being displayed Each of these views can then be saved for future viewing The snap-in also supplies a new subscription feature that lets you subscribe to event logs of other servers and then make them available via a local log, which by default is the ForwardedEvents Log This is extremely useful if you want a centralized location for viewing events from multiple servers The Services node functions the same as the services MMC snap-in, so you can stop and start services as well as configure services from here The Device Manager is exactly the same Device Manager that has always existed, except now it is neatly organized under the Diagnostics snap-in for easy access Lastly, a number of performance diagnostic tools are available under the Reliability and Performance node Reliability and performance monitoring is covered in greater detail in 7

In this exercise, we will create a custom view to display all Critical and Error event levels for the past seven days from the System and Security Windows logs 1 Open Server Manager if you don t already have it open 2 Expand the Diagnostics node 3 Expand the Event Viewer node 4 Right-click Custom Views 5 Select Create Custom View 6 From the Logged drop-down list, select Last 7 Days 7 Under Event Level, check both the Critical and Error checkboxes 8 From the Event Logs drop-down list, expand the Windows Logs tree and check the Security and System checkboxes (Figure 3-5) Make sure you don t just check the Windows Logs checkbox or all the checkboxes will be selected: Application, Security, Setup, System, and Forwarded Events 9 Click OK 10 In the Save Filter to Custom View dialog box (Figure 3-6), enter System and Security Events in the Name field 11 Enter Critical and Error messages from the System and Security Event Logs in the Description field 12 Click OK 13 The custom view will be selected and the results displayed in the right pane, as shown in Figure 3-7

If you re creating a subscription on a Windows Server 2008 instance that is not part of a domain and you are subscribing yourself, you will first need to enable Windows Remote Management (WRM) and then add your computer name to the list of trusted hosts using the following sequence of commands:

winrm quickconfig -q winrm set wimrm/config/client @{TrustedHosts="%COMPUTERNAME%"}

3:

Subscriptions are a good way to centralize event management By subscribing to multiple server event logs, you need to look at only one central location to view all log entries in which you are interested, rather than having to connect to each server individually For this exercise, we re going to simplify things by subscribing to the computer we are working on rather than a different computer 1 Open Server Manager if you don t already have it open 2 Expand the Diagnostics node 3 Expand the Event Viewer node 4 Right-click Subscriptions You may see a warning that the Windows Event Collector service is not running, asking if you would like to start it Click Yes 5 Select Create Subscription 6 Enter My Custom Subscription in the Subscription Name field 7 Enter First attempt at creating a subscription in the Description field 8 Click the Add button 9 Enter the name of your server In my case, my computer name is WIN2K8SRV1 10 Click OK 11 At this point, the screen should look like Figure 3-8 12 Click the Test button to ensure that connectivity is successful If it is successful, a confirmation is displayed on the screen (Figure 3-9) 13 Click OK to close the confirmation dialog box 14 In the Events to Collect area, click the Select Events button 15 Select Last 7 Days from the Logged drop-down menu 16 Check all the events-level checkboxes 17 Select the Security and System Windows Event Logs from the Event Log drop-down menu 18 Click OK on the Query Filter dialog box to save the filter 19 In the Subscription Properties dialog box, click the Advanced button 20 Under User Account, select Specific User 21 Click the User and Password button In my case, I entered WIN2K8SRV1\ Administrator as the username and the password for the Administrator account Click OK to close the Advanced Subscription Settings dialog box

3: