1

We have two Windows 2000 servers which run our Cisco Call Manager software. The servers are in a workgroup. We also have one Windows 2000 server running Cisco Unity which is part of our main domain, the rest of the servers, domain controllers etc are all running Windows Server 2003.

We are installing some environmental monitoring software on one of the 2003 servers on the domain and I would like to be able to run a script which would shut down the windows 2000 servers in the event of something like an air con failure.

Is this possible?

I can ping the Call Manager 2000 Servers from the 2003 domain but not the other way round. If I go into “my network places” on the 2000 servers I can see the domain, and see all of the computers in it. However I can only actually access the Windows 2000 Unity Server. Likewise the Unity Server is the only one I can ping.

Is there any way to give the domain admin account that the script will be running under permissions on the 2000 servers? And is there a way to allow the 2000 servers to connect to the 2003 ones without removing them from their workgroup?

Any help would be appreciated.

Thanks

1 Answer 1

2

Remotely invoking shutdown on a Windows machine, as you're describing requires two-way communication between the host initiating the shutdown and the host being shut down. Authentication is "baked in" to the protocol, so you'll also have to get the host initiating the shutdown to authenticate properly.

A simple script to remotely invoke the shutdown on a remote non-domain-joined computer would be as follows:

net use \\x.x.x.x\ipc$ /user:administrator password
shutdown -s -t 10 -f -m \\x.x.x.x
met ise \\x.x.x.x\ipc$ /delete

Substitute in the IP address of the remote server for "x.x.x.x" and the local Administrator username and password on the remote server on the first net use line.

Relying on "seeing" computers in "My Network Places" doesn't, unfortunately, tell you too much about what kinds of traffic are permitted between machines.

I just sniffed such an exchange between a Windows Server 2003 machine and a Windows 2000 Server machine (which, funnily enough, is running an old 2003-era Cisco CallManager 3 installation for one of my Customers) and performed the shutdown using the script above (though I rebooted their server, rather than shutting it down-- the packet exchange is the same). I observed that TCP ports 139 and 445 were used to move the traffic. I'd guess that if I had only port 139 open it'd probably still work, but you'd have to try that to see.

If you want to use the name of the CallManager server, rather than the IP address, in the shutdown script then you'll need to have either NetBIOS or DNS-based name resolution working.

Edit:

That's not so much a "Windows problem" as a hardware power-management problem, typically. You may have the wrong HAL installed, or the BIOS power management support may be turned off.

You can try adding the REG_SZ value "PowerdownAfterShutdown" in "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" and setting it to "1" to see if it has an effect on the behavior.

Check the BIOS and be sure that power-management functionality is enabled.

4
  • Sysinternals psshutdown lets you pass credentials if you want an one-liner :) (technet.microsoft.com/en-us/sysinternals/bb897541.aspx)
    – Zypher
    Jul 14, 2010 at 20:30
  • This is great thanks, I am able to run the script on the domain and have it take effect on the windows 2000 machine. The only problem is that rather than powering off the server it sits at a "it is now safe to turn off your computer" screen. Is there a way to make it power off? Thanks Shaz
    – user48318
    Aug 2, 2010 at 9:55
  • I'll drop on an edit. Aug 2, 2010 at 16:21
  • The weird thing is that I can shut down the computer using the start Shutdown command and when I do so the server powers off, when I run the script it shuts down Windows but then comes up with the “it is now safe to turn off your Computer message.” I have checked in the BIOS and advanced power management is switched on. I have looked in the control panel but there is no entry for power management. I changed the registry setting which was at 0 previously but still get the message. Any ideas?
    – user48318
    Aug 6, 2010 at 13:47

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .