This describes how to start wskrnl.exe (the logging engine) using a remote execution tool. We tested and recommend PsExec, a freeware tool to execute processes on a remote PC. You can download it from http://www.sysinternals.com/ntw2k/freeware/psexec.shtml.
PsExec allows you to run applications remotely on a target computer using an account that you specify. A typical use of PsExec is to remotely run a program under a local administrator account on a target computer.
Step by Step instructions:
Note: "\\RemotePC" mentioned below can be either the remote PC's name or IP address.
(1) Prepare ActMon Computer Monitoring.ini.
(2) Copy your local ActMon Computer Monitoring.ini and the ActMon Computer Monitoring files to the remote PC.
You can do this either manually our automate it with xcopy.
xcopy "C:\MyActMonFiles\*.*" "\\RemotePC\C$\Windows\System32\*.*" /r/i/c/h/k/e
(3) Use PsExec to start the logging engine remotely.
psexec \\RemotePC -u UserName -p Password "c:\Windows\System32\wskrnl.exe"
"UserName" and "Password" refer to the account on the remote system. The remote account that you use must be a member of the Administrators group on the remote PC.
Once it is started, the logging engine automatically completes the installation and starts monitoring. This process takes only a few seconds to complete.
(4) If you need to reboot remotely (optional), you can use:
psexec \\RemotePC -u UserName -p Password shutdown -r -t 1
(5) Done!
Page URL http://www.actmon.com/computer-monitoring/help/remote_execution.htm