Alternative Windows Server Administration Method to PowerShell?

Question

Alternative Windows Server Administration Method to PowerShell?

Anonymous

Hello all, I'm currently a student and exploring PowerShell. I understand CISA does not recommend disabling PowerShell, and I'm aware that adversaries can still use PowerShell through DLLs even if they can't invoke the PowerShell executable. However, just for purposes of my own knowledge, if an organization decided to disable PowerShell anyways, how would the administrators manage their servers? Would everything surround command prompt? What about servers with no GUI? Any help, information, or resources you can provide would be greatly appreciated!

0 comments

Answer accepted by question author

2 additional answers

Your answer

Answer 1

Anonymous

Hi StudentAdmin,

Thanks for your post. Despite of the powershell command, you can manage a server in the following ways. It depends on your requirements.

Using Windows Admin Center
Using Remote Server Administration Tools running on Windows 10
Remotely using Server Manager
Remotely using an MMC snap-in
Remotely with Remote Desktop Services

Best Regards,

Ian Xue

If the Answer is helpful, please click "Accept Answer" and upvote it.

0 comments

Answer 2

Rich Matheisen 48,116

You'd do it the way we did it before PowerShell existed. Most of the code I wrote prior (and even after) PowerShell was introduced was in Perl. Use SSH to access machines, FTP (or SFTP) to transfer data, ADSI (or LDAP) for AD work. While DNS integration with AD is nice the use of text-based zone files and master/slave servers does quite nicely. DHCP doesn't have to depend on Microsofts' code. Cmdlets aren't the only way to use web sites or REST -- Perl's been doing that for a long time. Perl also has excellent text manipulation. Object-oriented code is also possible although it suffers from the same shortcomings as PowerShell classes: there's no real privacy. I'll bet there are lots of Python examples, too. If neither of those are your cup of tea, there's still VB.

Anonymous

2024-01-17T16:49:26.5+00:00

Cool, that makes sense. Since VB is deprecated, I suppose the administrative options are PowerShell or a different language! Though it seems Perl and Python lack a lot of PowerShell's security features. Appreciate the answer, this is helpful!
Azar 31,715 Reputation points MVP Volunteer Moderator

2024-01-17T16:51:03.8366667+00:00

.....
Rich Matheisen 48,116 Reputation points

2024-01-17T17:17:57.9666667+00:00

. . . and PowerShell lacks many of Perls' features. Microsoft was trying to "extend" Perl in the early 2000s' but ran into a huge amount of community blowback based on its habit of making stuff Microsoft-specific. Perl was/is open-source and more than likely there would have been a Microsoft version of Perl that wouldn't run on anything except Windows. If you want to have a look at how Perl manages modules, visit CPAN.ORG. There's actually organization of modules! LDAP, TEXT, NET, WIN32, DATA, HTTP etc. as top-level names followed by secondary name that organize the overall function (UTIL, FTP) and then implementation (there may be several modules that do the same thing in different way or have different features). Compare that to the hodgepodge of PowerShell module names when you look for an available bit of code!

Answer 3

Azar 31,715 MVP Volunteer Moderator

Hey StudentAdmin

indeed yes powerShell is a powerful and widely used tool for Windows Server administration, obviously as you asked it's not the only option available. Disabling PowerShell entirely might be an extreme measure, but lemme share you a few alternative methods for Windows Server administration. Classic Command Prompt (cmd.exe) is still hanging around for basic stuff, though it's not as fancy as PowerShell. Then there's the Remote Server Administration Tools (RSAT), letting admins manage servers remotely from a Windows client.

For servers without a GUI, you've got Server Core or Minimal Server Interface installations. They're a bit more command-line-heavy, but they get the job done. Task Scheduler can lend a hand in automating tasks, too.

I'm saying this again disabling PowerShell might seem like a tough, that's an awesome question hope you find the ans useful.

If this helps kindly accept the answer thanks much.

Anonymous

2024-01-17T15:45:52.7633333+00:00

Hi Azar,

Thanks a bunch for your comment. So to see if I understand correctly, without PowerShell, there's basically command prompt or the in-built command line for Core or Minimal Server? I say this because it appears PowerShell must be enabled on the server for RSAT: "Windows PowerShell and Server Manager remote management must be enabled on remote servers to manage them by using tools that are part of Remote Server Administration Tools for Windows 10." (https://learn.microsoft.com/en-us/windows-server/remote/remote-server-administration-tools)
Azar 31,715 Reputation points MVP Volunteer Moderator

2024-01-17T16:51:51.5+00:00

Hey StudentAdmin you are absolutely right, and regarding RSAT, you're correct that PowerShell and Server Manager remote management features need to be enabled on the remote servers for RSAT tools to manage them. However, RSAT tools themselves can be installed on a Windows client machine that has PowerShell and Server Manager remote management features enabled. So, even without PowerShell enabled directly on the server, you can still use RSAT from a Windows client with PowerShell and Server Manager remote management features enabled. If this helps kindly upvote and accept the answer thanks agiain.
Anonymous

2024-01-17T17:00:11.37+00:00

So the learn article is incorrect and PowerShell does not need to be enabled on the remote server?
Azar 31,715 Reputation points MVP Volunteer Moderator

2024-01-17T17:11:52.43+00:00

i think for direct PowerShell Remoting to a server, the server doesn't need PowerShell explicitly enabled. But for RSAT tools to work seamlessly, the remote server should have the necessary remote management features enabled. guess this clarifies.
Anonymous

2024-01-17T17:16:57.4733333+00:00

Yeah I don't know, the quote I included says it is necessary.
Azar 31,715 Reputation points MVP Volunteer Moderator

2024-01-17T17:20:09.47+00:00

hehe lemme clarify, RSAT tools often leverage PowerShell Remoting and other remote management features to execute commands on the remote server. in short it is necessary and the learn doc is right. getting rid of Powershell is an extreme measure as I mentioned above

Share via

Alternative Windows Server Administration Method to PowerShell?

2 additional answers

Your answer