Skip to content

Manage Non Domain Server From Domain Client

Manage Non-Domain Server from domain Client

RSAT - Remote Server Administration Tools

Sample Names used below: - Non-domain fully qualified server name: MyServerName.Local - Local admin user for login: \\MyServerName.Local\Administrator

  1. Install or Add RSAT to the Client PC running Pro versions Windows 10 / 11.
  2. Download Link for older version and install instructions: https://www.microsoft.com/en-us/download/details.aspx?id=45520.
  3. Please pay attention to the Installation Section as no download is necessary for versions after Windows 10 October 2018 Update.
  4. List of RSAT tools available via Features on Demand: https://docs.microsoft.com/en-us/windows-hardware/manufacture/desktop/features-on-demand-non-language-fod#remote-server-administration-tools-rsat
  5. List of RSAT dependencies: https://docs.microsoft.com/en-us/windows-hardware/manufacture/desktop/features-on-demand-non-language-fod#remote-server-administration-tools-rsat
  6. New versions of windows can Add an Optional Feature, click +, choose RSAT features like Server Manager, etc.

  7. Other Management tools can be installed via Turn Windows Features On or Off. For example, Hyper-V Management Tools.

  8. Open Server Manager on client PC using Domain Admin Credentials (if you need to add domain servers for management).

  9. Dashboard|Add Other Servers to Manage

  10. For non AD servers, use DNS Tab to add server by name or IP.

  11. Once server added, it should appear in the list of All Servers. If errors are shown next to added servers, please, right-click on Server and choose Manage As ... and use MyServerName.Local\Administrator to login. !!!Please note that in some cases username Administrator is not optional!!!

  12. If after right clicking and refreshing server it still shows Errors like Kerberos authentication error or Online - Access denied, open PowerShell as administrative user and add non-domain servers to Trusted Hosts via: 

    Set-Item WSMan:\localhost\Client\TrustedHosts "MyServerName.Local" -Concatenate -Force

  13. Check if server was added to trusted list: 

    Get-Item WSMan:\localhost\Client\TrustedHosts

  14. Allow Remote access on Public Zones (in case you client is on DC and the server is not). Enables firewall rules for CredSSP and WinRM: 

    Enable-WSManCredSSP -Role server

More info at: