Some might call me a control freak, but when I have the opportunity to investigate a machine myself or provide instructions via the phone/mail to the end-user you know what I'm going to choose.  One of the easier ways that I find is to use remote.exe which is part of the debugging package.  I'm just going to show you two examples of using remote.exe:

How to share out  a command prompt.  If Vista have the user open an elevated command prompt and then type this:

C:\debuggers_public>remote /S "CMD" USERNAME
**************************************
*********** REMOTE ************
*********** SERVER ************
**************************************
To Connect: Remote /C TRENCHTOWN "USERNAME" //Connect using this.

Microsoft Windows [Version 6.0.6000]
Copyright (c) 2006 Microsoft Corporation. All rights reserved.

Now you can connect to this command prompt via the command above.  You are officially on the remote machine at their command prompt and can continue your investigation using any tools that can be accessed at the cmd prompt.

You might also find an instance when you have a dump that you are investigating and you'd like to share it with others:

C:\debuggers_public>remote /S "cdb -z iexplore.dmp -y SRV**http://msdl.microsoft.com/download/symbols" IE_DUMP
**************************************
*********** REMOTE ************
*********** SERVER ************
**************************************
To Connect: Remote /C TRENCHTOWN "IE_DUMP" //You would connect to this remote via this command

Microsoft (R) Windows Debugger Version 6.6.0007.5
Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File [C:\debuggers_public\iexplore.dmp]
User Mini Dump File with Full Memory: Only application data is available

Windows Vista Version 6000 UP Free x64
Product: WinNt, suite: SingleUserTS
Debug session time: Tue Apr 3 20:30:04.000 2007 (GMT-7)
System Uptime: 5 days 1:31:39.135
Process Uptime: 0 days 0:00:36.000
Symbol search path is: SRV**http://msdl.microsoft.com/download/symbols

<snip>

One other thing to note, to exit the remote without killing the remote itself use @q.  Type the @ symbol in the remote to see other syntax.

Hope that helps.

 

Technorati tags: ,