No tool like an old tool
Administration Tools Pack gets a refresh
Another eNerd called me yesterday wondering how to let a non-admin user at his client’s business have access to their virtualized server. The hope was to have the vSphere Client locked down in some way.
When I asked what the user needed to do, it was “Manage users and reset passwords and such.” I realized then that this was not a VMware access issue at all, but a Windows Server rights issue.
In fact, this can readily be handled by the Microsoft Management Console (MMC) which can be installed on the user’s workstation – no need to give the user login to the Windows or VMware server at all.
This is not a new trick by any means, but is one worth remembering.
Also, I’ll add that there is now a version for Windows 7 (Win7) and Vista, in both 32 and 64 bit flavors. (Sorry, they don’t let this run on “Home” editions of Windows.) The following give some details.
There are many places where you can get detailed help on using MMC such as this post: http://technet.microsoft.com/en-us/library/bb742442.aspx
Here’s just a bit then about getting started with the “new” version.
- In Windows 7, click on the start button, and type “mmc” (Win7 will find the MS Management Console) and press enter. It will create a blank console called Console1. Click on “File”, “Add/Remove Snap In…” and you’ll see NO snap-ins for AD user management. Close MMC and let’s go get that snap-in.
- Download and run the Remote Server Administration Tools for Windows 7 (32 and 64 bit) is at:
- Basically, after installation, you access Programs and Features from the Control Panel, click on “Turn Windows features on or off”, and expand Remote Server Administration Tools to reveal all the tools.
- For the case mentioned, to obtain access to Active Directory Users and Computers (for password and other user information), I drilled down into Role Administration Tools until I found “AD DS Snap-ins and Command-line Tools”. Check it and click OK
- Back to Win7, click on the start button, and type “mmc” and press enter. It will create a blank console called Console1. Click on “File”, “Add/Remove Snap In…” and you’ll see one for Active Directory Users and Computers. Click Add-> and OK and you’ll have your Management Console well on it’s way.
A help screen should open to give you further assistance.
See the TechNet article for additional steps such as linking it to the Domain Controller, Saving the Console, etc..