Recast Enterprise Server Control Panel

From Now Micro
Jump to: navigation, search

Contents

This Wiki is out of date. Please view the current documentation at https://wiki.recastsoftware.com

Launching the Control Panel

On the server that you installed Recast Enterprise Server, click on Start and type Control Panel. Select Launch Mobile Tools Enterprise - Control Panel.exe

Launch Mobile Tools Enterprise Control Panel.png

The Recast Enterprise Server Control Panel will start. To begin, type the name of the server in the top text box and click Connect. The name needs to match the Common Name in the certificate assigned to the web service and the URL needs to end with /MobileToolsEnterprise.svc

Recast Enterprise Server Control Panel Connect.png

Licensing

On first launch, you will see the Licensing tab turn red, as no license has been imported.

Recast Enterprise Server Control Panel Connected License Required.png

To import a license, you can either click the Licensing tab and click the Import License button, or use the File - Import License File option.

Recast Enterprise Server Control Panel Licensing.png

Browse to the location of the license file and click Open.

Browse For License.png

You should get a popup indicating the license was imported successfully, and the Licensing tab will update with your newly imported licensing information.

License Import Succeeded.png

Recast Enterprise Server Control Panel Licencing License Imported.png

Adding Users

The Users tab is used to add and remove users from Recast Enterprise Server, as well as add and remove permissions for users. To add a user, type the domain\username in the Add User section, and click the Add User button.

Recast Enterprise Server Control Panel Add User.png

Selecting the user from the list on the left will show the list of permissions that can be added to the user account as well as the list of permissions that the user already has.

Recast Enterprise Server Control Panel Add User Permissions.png

To add a permission, select it from the Available Permissions list and click the Right Arrow button.

Recast Enterprise Server Control Panel Add User Add Auditor.png

The permissions will be refreshed to show the current state of the user's permissions.

Recast Enterprise Server Control Panel Add User Auditor Permissions.png

To remove a permission, select it from the User Permissions list and click the Left Arrow button. Note that permissions that are applied as part of a role can not be removed without removing the role.

Recast Enterprise Server Control Panel Add User Remove Auditor.png

Adding Roles

Roles are groups of permissions that can be assigned to users. The Roles tab shows the list of available roles, and is the same layout as the Users tab.

Recast Enterprise Server Control Panel Default Roles.png

To add a new role, type the desired role name in the Add Role section and click the Add Role button.

Recast Enterprise Server Control Panel Add Role.png

Selecting the role will show the currently assigned permissions, as well as the permissions available to be added to the role.

Recast Enterprise Server Control Panel Add Role Default Permissions.png

Adding permissions to a role is the same as on the Users tab, simply select the desired permission and click the Right Arrow Button.

Recast Enterprise Server Control Panel Add Role Add Helpdesk Permissions.png

Permissions can also be added directly.

Recast Enterprise Server Control Panel Add Role Add GetRunningActions Permissions.png

The resulting tier 2 support role will allow all of the helpdesk permissions, with the added ability to list and kill actions run by other Recast Enterprise Server users.

Recast Enterprise Server Control Panel Add Role Add KillAction Permissions.png

Once the role is configured, we can click on the Users tab to add a user to the new role.

Recast Enterprise Server Control Panel Add Role Add User To Role.png

After adding the user to the role, the permissions are shown. Note that it has all of the helpdesk role permissions as well as the permissions we added manually.

Recast Enterprise Server Control Panel Add Role Add User To Role Permissions.png

Audit Log

The Audit Log tab contains the audit information for all of the actions that have been run against Recast Enterprise Server. You can refresh the view by right clicking on the Audit Log, and selecting Refresh.

Recast Enterprise Server Control Panel Audit Log.png

Server Settings

The Server Settings tab contains all of the plugin settings as well as a few IIS settings.

Recast Enterprise Server Control Panel Server Settings.png

Global Settings are settings that should be respected by all plugins. The "Ping Computer Before Running Tools" setting determines if ICMP Echo is used to check if a computer is turned on before running each tool. "The DNS Reverse Lookup Before Running Tools" setting checks to make sure that the DNS forward lookup matches the reverse lookup when running a tool. This is to prevent scenarios in which you think you're running a tool on a particular computer, but because of an old DNS record, you are actually running it on another tool. The "Display License Prompts to Users" determines whether users of the desktop tools will receive a notification when the license is expired or approaching expiration.

Recast Enterprise Server Control Panel Server Settings Global Settings.png

The Active Directory settings determine which domain should be used when running tools that require Active Directory integration. The Use FQDN setting determines if the mobile clients will retrieve the FQDN of devices in Active Directory, or if it will use the short name instead.

Recast Enterprise Server Control Panel Server Settings Active Directory Settings.png

The Administration settings control permissions checking. If permissions checks are disabled, then user permissions as configured in the Recast Enterprise Server Control Panel will be ignored. Be sure to turn this on once the user accounts are configured appropriately.

Recast Enterprise Server Control Panel Server Settings Administration Settings.png

The ConfigMgr settings determine which ConfigMgr site server and site code that will be used when running the mobile tools. It also has a Use FQDN setting that determines if the mobile and desktop clients retrieve the FQDN or short name when running actions on computers. Lastly, it contains the WOL port setting that is used to determine which UDP port is used when Wake On LAN packets are sent from the Recast Enterprise Server.

Recast Enterprise Server Control Panel Server Settings ConfigMgr Settings.png

Scheduler settings control settings related to rate limiting and record caching. The Number of Jobs setting determines how many simultaneous jobs each connected user is able to run. By default, each user is allowed to run an action on 20 computer simultaneously. The Stale Record Age setting determines how long results are cached on the server before the service deletes them. By default, the server will cache results for 60 minutes, or until the client requests the results, whichever comes first.

Recast Enterprise Server Control Panel Server Settings Scheduler Settings.png

When configuring any of the plugin settings, be sure to click the Save Settings button before navigating away.

Recast Enterprise Server Control Panel Server Settings Save Plugin Settings.png

The lower pane contains the IIS server settings. The Application Pool user is configured in the upper left drop down. The Network Service account is recommended if Delegation is being used, otherwise a service account is recommended.

Recast Enterprise Server Control Panel Server Settings AppPool User.png

The Delegation Mode dropdown determines if the web service tries to impersonate the user that logged in to Recast Enterprise Server. If set to Delegate, the user account that the Application Pool is running as needs to have permissions to delegate the user, and the Active Directory account for the computer running Recast Enterprise Server needs to be trusted for unconstrained delegation.

Recast Enterprise Server Control Panel Server Settings Delegation Mode.png

To trust a computer for unconstrained delegation, open Active Directory Users and Computers, go to the properties of the computer, and click on the Delegation tab. The Recast Enterprise Server account should be configured as shown below in order for delegation to work.

AD Trust this computer for delegation to any service.png

The Debug Level dropdown controls the logging verbosity for the web service. Log files are located in C:\ProgramData\Now Micro\Logs.

Recast Enterprise Server Control Panel Server Settings Debug Level.png

When configuring the Application Pool from this interface, remember to click Save, otherwise the settings will not be used.

Recast Enterprise Server Control Panel Server Settings Save AppPool Settings.png

Next, you will need to configure your environment to support the Recast Enterprise Tools by enabling ICMP Echo, Remote WMI, and Remote Registry, install the Recast Enterprise Desktop Tools and install the mobile applications for Android, iOS, and Windows Phone

Personal tools
Namespaces

Variants
Actions
Navigation
Tools