Enterprise Software

Five tips for remotely administering desktops

Relying on various technologies to remotely administer workstations can save you both time and money. These pointers will help keep your remote administration efforts running smoothly.

Without the ability to remotely administer desktops, administrators would either A) walk around working on most of their days or B) have to rely on their clients' abilities follow instructions over the phone. The latter, of course, can be a complete disaster. Instead, administrators depend upon various tools to gain remote access to desktops. But what are the best practices for managing this ever-growing task? Here are a few suggestions.

1: Keep the end users aware

One of the cardinal rules of remote administration is to inform remote users that you are going to be logging in and administering their system remotely. Why is this so important? I have had plenty of clients (such as lawyers and doctors) who handle sensitive client data that can't be seen by anyone other than those defined by HIPPA or whatever governing body they fall under. You shouldn't want to see sensitive data -- or take a chance that you might see it. Why risk a possible lawsuit? Always make sure clients know you are about to remotely take control of their machine so they can close out any sensitive data.

2: Have a back door for your back door

I recently ran into a situation where I was using a remote tool that was unable to start as a system service. I needed to enter the admin credentials for the UAC for a client whose end users were not allowed access to the admin creds. So to get around that, I quickly set up a remote session within a remote session using a tool I knew could start as a system service. No matter how well you plan, something is going to come up to foil your efforts. Make sure you have another way in... especially if you are dealing with end users who seem to have trouble knowing where to enter http://logmein123.com! If you have this back door in place, you will avoid adding extra time and frustration to an already-frustrating job.

3: Use Logmein Free

We have numerous clients who we KNOW will require weekly (if not daily) remote sessions to remap lost network drives, locate lost files, etc. We always add their machines to the LogMeIn Free tool. By doing this, you have nearly instant access to those machines (without having to depend upon the end users to connect the remote session). If you use this option, be sure you password-protect the computer on Logmein -- and never enter the machine unannounced (see #1).

4: Avoid the Windows UAC and use remote reboot

This issue will kick you in the pants more often than not. Some remote support software will allow you to start the remote tool as a system service. (LogMeIn Rescue is outstanding for this.) When you do this, you won't have to require the end user to constantly click OK on the UAC. And if necessary, you will be able to enter the administration creds when prompted. You'll also be able to initiate remote reboots that don't require user interaction. This allows unattended reboots -- a boon to remote administrators.

5: Be polite

Remember, you are working to help the users on the other end. There are instances where those users are going to be near panic and need help right away. They may be desperate to make sure they haven't lost work or just need to get back to work as soon as possible. Or... you might wind up with one of those users who think they know more than you. Either type of user might be prone to constantly taking control of the mouse -- which will prevent you from getting your job done. When this happens, do not lose your cool. Just let them be a "part" of the session and kindly, gently remind them that you can fix the problem and for them to allow you to have control of the machine.

Your turn

How many times have you had a remote session do directly to pot? It happens. And when it does, your job comes to a painful halt. But with just a bit of planning and patience, your task will be much easier to handle and a future remote administration chores will be a snap. Do you have additional tips to recommend to your fellow admins?


About

Jack Wallen is an award-winning writer for TechRepublic and Linux.com. He’s an avid promoter of open source and the voice of The Android Expert. For more news about Jack Wallen, visit his website getjackd.net.

10 comments
ivoyhip
ivoyhip

I use VNC. It is very easy to use. For some tasks, I used Dos commands, and VBscripts to do remote administration. That case, I do not even need take control the mouse and keyboard of the remote systems. The requirement of that approach is the firewall must be off and I need to know the credential of the remote computers.

tallachoo
tallachoo

WebEx has been a lifesaver many times, I don't know what I would do without it!

Daniel Breslauer
Daniel Breslauer

I use Live Mesh in a corporate environment with great success. I love it. First the beta, now the final version. You can set it up on the 'admin' account of the machine. In fact this is for laptops. If it were stationary desktops on a company network, why not use RDP? Our workforce is home-based with company laptops - that's where web-based tools come in.

Appocalypse
Appocalypse

I have one top priority TIP before you do any kind of modification on the remote system! Create one restore point, so if something goes wrong you can avoid the lawsuit by doing the restore and you get all back, even the user can do the restore you can guide him by phone and problem solved you can start trying to fix the problem again. PS. Windows Server should have restore point system.

bkindle
bkindle

I have used free/pro/rescue and love the product. It has saved countless hours of time in travel and sitting on my rear in a car for hours, at a remote site for hours, back in the car.....you get my point. Team Viewer is also a very nice app, easy too.

Shawshanks
Shawshanks

I'm using it at work. Pretty decent.

Neon Samurai
Neon Samurai

Aperently WebEx is the current best of breed (sadly, I have some issues with it still). I griped about it a lot less after the first time I needed a desktop shared on a remote machine. If your going to involve a third party in what should be a two party connection, you would do a lot worse than WebEx.

SgtPappy
SgtPappy

works great for my remote laptop users. I use logmein as a backup.

SgtPappy
SgtPappy

I've found it to be 50/50 on the reliability scale.