Solutions for managing Windows Active Directory domains

General information

What are the prerequisites for an optimal functioning of your software?

Hello, I have just installed the evaluation version of your IDEAL Administration software (or IDEAL Remote) and I would like to know if I need to set up certain configurations or GPOs on my client workstations so that your software works optimally?

Our software has been designed to help you manage the client and server workstations that make up your Active Directory domain. To do this, our software connects to client workstations, remotely and from your administration workstation, in order to retrieve the information that will be useful to you in your daily management.

Our software does not install any agent on remote workstations to retrieve this information. They are retrieved through the registry or through WMI (Windows Management Instrumentation).

The first of the requirements is that you must have administrative rights on the remote workstations to be managed.

Then, you can set up the following GPOs in order to fully use our software:

1. The remote registry access service (RemoteRegistry) must be started and configured in "Automatic" start-up in order to allow our software to access remote registers.

You can enable this service and configure it to start automatically using a GPO:

Windows Server 2003 Domain Controller

1. Open the Group policy management editor
2. Find Local Policy > Computer Configuration> Policies> Windows Settings> Security Settings> System Services
3. In the right view, find Remote registry
4. Configure the startup mode in Automatic
5. Restart the client workstations for the new policy to be applied

Windows Server 2008/2012/2016/2019 or Domain Controller

1. Open the Group policy management editor
2. Expand Computer Configuration> Windows Settings> Security Settings> System Services
3. Find the remote registry service and change the startup mode to Automatic
4. Restart the client workstations for the new policy to be applied

2. Remote management of Windows services requires setting the value DisableRPCOverTCP to 1 in the HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Control key (Only for Windows 10 and higher). Our software uses Windows services when taking control of client workstations or when configuring them.

Read our FAQ on this subject: https://www.pointdev.com/en/faq/faq-ideal-administration-pointdev-vnc-tightvnc-ultravnc-slow-remote-control-windows-10-11-disablerpcovertcp-id-980.html

3. WMI access must be functional and authorized remotely on all of your client workstations. WMI (Windows Management Instrumentation) allows in particular to remotely retrieve certain parameters of your client workstations such as serial numbers, to be able to rename a computer, modify the network configuration, etc.

Read our FAQ on this subject: https://www.pointdev.com/en/faq/faq-ideal-administration-wmi-computer-rpc-dcom-uac-firewall-remotely-id-561.html