Recast Enterprise Server Control Panel
This Wiki is out of date. Please view the current documentation at https://wiki.recastsoftware.com
Launching the Control Panel
On the server that you installed Recast Enterprise Server, click on Start and type Control Panel. Select Launch Mobile Tools Enterprise - Control Panel.exe
The Recast Enterprise Server Control Panel will start. To begin, type the name of the server in the top text box and click Connect. The name needs to match the Common Name in the certificate assigned to the web service and the URL needs to end with /MobileToolsEnterprise.svc
On first launch, you will see the Licensing tab turn red, as no license has been imported.
To import a license, you can either click the Licensing tab and click the Import License button, or use the File - Import License File option.
Browse to the location of the license file and click Open.
You should get a popup indicating the license was imported successfully, and the Licensing tab will update with your newly imported licensing information.
The Users tab is used to add and remove users from Recast Enterprise Server, as well as add and remove permissions for users. To add a user, type the domain\username in the Add User section, and click the Add User button.
Selecting the user from the list on the left will show the list of permissions that can be added to the user account as well as the list of permissions that the user already has.
To add a permission, select it from the Available Permissions list and click the Right Arrow button.
The permissions will be refreshed to show the current state of the user's permissions.
To remove a permission, select it from the User Permissions list and click the Left Arrow button. Note that permissions that are applied as part of a role can not be removed without removing the role.
Roles are groups of permissions that can be assigned to users. The Roles tab shows the list of available roles, and is the same layout as the Users tab.
To add a new role, type the desired role name in the Add Role section and click the Add Role button.
Selecting the role will show the currently assigned permissions, as well as the permissions available to be added to the role.
Adding permissions to a role is the same as on the Users tab, simply select the desired permission and click the Right Arrow Button.
Permissions can also be added directly.
The resulting tier 2 support role will allow all of the helpdesk permissions, with the added ability to list and kill actions run by other Recast Enterprise Server users.
Once the role is configured, we can click on the Users tab to add a user to the new role.
After adding the user to the role, the permissions are shown. Note that it has all of the helpdesk role permissions as well as the permissions we added manually.
The Audit Log tab contains the audit information for all of the actions that have been run against Recast Enterprise Server. You can refresh the view by right clicking on the Audit Log, and selecting Refresh.
The Server Settings tab contains all of the plugin settings as well as a few IIS settings.
Global Settings are settings that should be respected by all plugins. The "Ping Computer Before Running Tools" setting determines if ICMP Echo is used to check if a computer is turned on before running each tool. "The DNS Reverse Lookup Before Running Tools" setting checks to make sure that the DNS forward lookup matches the reverse lookup when running a tool. This is to prevent scenarios in which you think you're running a tool on a particular computer, but because of an old DNS record, you are actually running it on another tool. The "Display License Prompts to Users" determines whether users of the desktop tools will receive a notification when the license is expired or approaching expiration.
The Active Directory settings determine which domain should be used when running tools that require Active Directory integration. The Use FQDN setting determines if the mobile clients will retrieve the FQDN of devices in Active Directory, or if it will use the short name instead.
The Administration settings control permissions checking. If permissions checks are disabled, then user permissions as configured in the Recast Enterprise Server Control Panel will be ignored. Be sure to turn this on once the user accounts are configured appropriately.
The ConfigMgr settings determine which ConfigMgr site server and site code that will be used when running the mobile tools. It also has a Use FQDN setting that determines if the mobile and desktop clients retrieve the FQDN or short name when running actions on computers. Lastly, it contains the WOL port setting that is used to determine which UDP port is used when Wake On LAN packets are sent from the Recast Enterprise Server.
Scheduler settings control settings related to rate limiting and record caching. The Number of Jobs setting determines how many simultaneous jobs each connected user is able to run. By default, each user is allowed to run an action on 20 computer simultaneously. The Stale Record Age setting determines how long results are cached on the server before the service deletes them. By default, the server will cache results for 60 minutes, or until the client requests the results, whichever comes first.
When configuring any of the plugin settings, be sure to click the Save Settings button before navigating away.
The lower pane contains the IIS server settings. The Application Pool user is configured in the upper left drop down. The Network Service account is recommended if Delegation is being used, otherwise a service account is recommended.
The Delegation Mode dropdown determines if the web service tries to impersonate the user that logged in to Recast Enterprise Server. If set to Delegate, the user account that the Application Pool is running as needs to have permissions to delegate the user, and the Active Directory account for the computer running Recast Enterprise Server needs to be trusted for unconstrained delegation.
To trust a computer for unconstrained delegation, open Active Directory Users and Computers, go to the properties of the computer, and click on the Delegation tab. The Recast Enterprise Server account should be configured as shown below in order for delegation to work.
The Debug Level dropdown controls the logging verbosity for the web service. Log files are located in C:\ProgramData\Now Micro\Logs.
When configuring the Application Pool from this interface, remember to click Save, otherwise the settings will not be used.
Next, you will need to configure your environment to support the Recast Enterprise Tools by enabling ICMP Echo, Remote WMI, and Remote Registry, install the Recast Enterprise Desktop Tools and install the mobile applications for Android, iOS, and Windows Phone