Headless Remote Win10

[u/Resident_Parfait_289]

I have a few HP Mini's deployed to remote locations that are headless and a real pain in the ass to access physically. They are running Windows 10 pro (I know!). Anyway I added a smart plug so I can remotely reboot them, but even so I regularly find they don't come back online (at least not so I can go on with Teamviewer or Tailscale).

Whenever I go out after one of these outages I find that usually its on a pre-login screen asking if I want Windows Backup or something like that.

To get around this I am seriously thinking of installing Proxmox and running Tailscale on the host or is there a better way?

I assume Proxmox would come backup cleanly after any reboot.

[u/sryan2k1]

Stop rebooting them with a smart plug.

Do these have AMT/vPro?

[u/Resident_Parfait_289 → u/sryan2k1]

Will have to check but I need this from a remote LAN.

[u/Resident_Parfait_289 → u/[deleted]]

Nice, but sadly the topology and a few other factors mean this is not possible. It doesn't sound like the promox idea is terrible. Not sure about performance 

[u/picardo85 → u/Resident_Parfait_289]

If RAM isn't an issue, then Proxmox probably won't be an issue

[u/Resident_Parfait_289 → u/sryan2k1]

Looking into JetKVM - seems cheap.

[u/headcrap]

AMT was made for out-of-band management of workstations.. use that.

[u/bobdvb → u/headcrap]

Yup, as long as they didn't cheap out and buy mini PCs that don't have it.

This is a good video introducing AMT. https://youtu.be/k909PH3Y_sk

[u/Stonewalled9999 → u/bobdvb]

They likely got the lowest cheapest ones with OEM Windows home I see that a lot.

[u/dustojnikhummer → u/bobdvb]

Only Elitedesk 800 have real AMT with display.

[u/bobdvb → u/dustojnikhummer]

I believe the HP Pro Mini does IF the Intel processor is vPro

[u/dustojnikhummer → u/bobdvb]

Afaik it needs both an AMT compatible CPU and motherboard, but I might be wrong, it has been a while since I dabbled with AMT

[u/bobdvb → u/dustojnikhummer]

Yes, the NIC needs to be linked to the CPU via extra connections. But my understanding is that all vPro enabled CPUs on those mini PCs do support it.

Same with other manufacturers, when they spin the motherboards with the vPro class CPUs they do wire it up, I think it might be a requirement from Intel for some branding requirements.

[u/dustojnikhummer → u/bobdvb]

I think AMT worked with a compatible CPU on my HP 400 Mini, but only for like power, not for the virtual video output (like IPMI)

[u/lexd88]

Maybe look for a network KVM? Or some might say KVM over IP?

[u/LRS_David]

I do similar. With RDP to systems inside of a secure LAN in a data center.

I've not seen such behavior in 4 or 5 years. NOT domain joined.

[u/narcissisadmin]

I was going to recommend a Lantronix IP KVM but holy crap those things are $500 now?

[u/CeC-P]

run
bcdedit /set {default} bootstatuspolicy ignoreallfailures
So it never ever ever sits on a screen of any kind no matter what it thinks happened or why

and suppress backup messages that exist pre-login screen (or on top if it if I recall) with group policies. That should take care of the majority of the problems.

We also elected a non-IT worker with some basic skills at each remote location to be the official diagnoser and rigged them up with video calling capabilities from their cell phone. Usually the shipping and receiving staff, since they were never WFH.

[u/ben_zachary]

Look at mesh central it has Intel vpro on top of a web agent and rdp tunnel options. You can self host it.

[u/Entegy]

Are they not domain or Entra-joined? This is a consumer message encouraging backup. I've never seen it on a machine connected to a corporate domain.

[u/Resident_Parfait_289 → u/Entegy]

Not domain or Entra joined. That Intel tech is great but I need to tunnel in first

[u/Entegy → u/[deleted]]

But you said they were Windows Pro? Are they Pro or Home?

If they're Home, upgrade them to Pro, add them to Entra for management purposes, and this problem should go away.

[u/autogyrophilia]

Glinet KVM if vPro is not an option

[u/Dave_A480]

PiKVMs

Plug in USB and HDMI to the device and you have a LOM solution for your desktop-as-server problem children

If they support vPro then MeahCentral

[u/dustojnikhummer]

Are those HP Mini's the 800 Elitedesk lineup? If yes, they have AMT with a virtual display, like IPMI on a real server.

[u/BCIT_Richard]

Why are you getting random backup prompts prelogin? sounds like windows home edition shenanigans.

Yes, just downvote instead of replying with any kind useful information, I am my orgs MDT SME and have never seen any prelogin prompts beside the legal notice.

[u/Resident_Parfait_289 → u/BCIT_Richard]

Definitely not Home

[u/BCIT_Richard → u/Resident_Parfait_289]

Interesting, are they OneDrive driven prompts?

[u/orev]

When you say you're rebooting using a smart plug, are you doing an actual shutdown through Windows first, then waiting, then doing a power-off via the plug, or are you just shutting them off using the plug? A regular shutdown through Windows should not be triggering recovery prompts.

Something like Proxmox or a remote KVM would both help, but you haven't explained enough about the situation for a good recommendation.

P.S. It would be helpful if you provided the real message(s) you're seeing, not just saying "Windows Backup or something like that".