Windows Admin Center (formerly codenamed Project Honolulu) is an evolution of Windows Server in-box management tools; it’s a single pane of glass that consolidates all aspects of local and remote server management. As a locally deployed, browser-based management experience, an Internet connection and Azure aren’t required. Windows Admin Center gives you full control of all aspects of your deployment, including private networks that aren’t Internet-connected” [Source Microsoft].
When installed on a windows server, WAC provides a centralized point of management for your server environment. By defining who can access the WAC, we are also enhancing the security of our management. It can also be accessed via the web browser and this can also be disabled.
Some points to note before installing WAC
- It can be installed on Windows 10 or Windows 2016
- It does not require any agent to be installed on the servers that needed to be managed.
They are managed over Remote PowerShell and WMI over WinRM If you must manage Windows Server 2012 and 2012 R2 Server, Windows Management Framework (WMF 5.1) must be installed.
To prepare your environment for Windows Admin Center, see if any of these factors relate to you. http://bit.ly/35qWu7J
An important factor to consider
– Ensure you create a CSR (Certificate signing request) and request a certificate with it from a trusted CA).
Preferred Installation type:
- Gateway Server (Serves as a gateway server and access from any client browser with connectivity to the gateway server)
We have other installation types
- Local Client: Installed on Windows 10, great for quick start and testing
- Managed Server: Installed on an individual Server to have it managed.
- Failover Cluster: Enable high availability of the gateway service.
Download WAC here: https://www.microsoft.com/en-us/evalcenter/evaluate-windows-admin-center
Steps to installation
Windows is currently using my country location “Germany” to deliver local content and this is why the installation is in German 😉
Download and double click on the MSI file
– Accept the license and click on next
– And this will display the gateway endpoint configuration window as shown below.
Click on next and select the first option
– Leave as default and click on the installation
Note: The following before proceeding with the installation
1: automatically generated certificates expire 60 days after installation.
2: To use HTTPS, you can bind an SSL certificate Thumbprint in the second option below. See the link on how to retrieve an SSL Thumbprint https://techdirectarchive.com/2020/01/05/how-to-retrieve-an-ssl-thumbprint-in-windows-using-powershell/
The installation will run and prompt a User Account Control, Click on Yes
This will run and have WAC installed on your Server
– Click on finish
- Once the install is complete, open a browser from a remote computer and navigate to URL presented in the last step of the installer.
Access the portal on the server will not require authentication to the server.
To add resources (servers), Click on the Add button.
– Click on the Add button.
– Under Windows Server, Click on Add
Enter the server name as shown below and
– Click on Add.
Accessing from a different web browser will require you to authenticate to the server.
Microsoft Edge does not work at the moment. Firefox works This depends absolutely on your environment. If you have a different administrative credential other than your windows login credential, specify it here before you can have your servers added to WAC.
When the Server is added.
– Click on the server and on the right Pane, decide on the account type you would like to use and click on continue.
When you successfully supply your credentials, the server will be added to the Windows Admin Center as shown below.
Click on TechDArchive to open the server management tools window as shown below.
Note: WAC has an in-built set of tools that can be used to manage almost all aspects of Windows Server. To access this, simply click on the gateway. The screenshot below is a subset of the tools available.
For more information on Windows Admin Center, see https://www.tenforums.com/tutorials/113966-windows-admin-center-centrally-manage-all-your-windows-10-pcs.html
For more information on Azure Security Center, see https://docs.microsoft.com/bs-latn-ba/azure/security-center/security-center-intro