Windows – Recover Windows from safe mode on Google Cloud Platform

google-cloud-platformgoogle-compute-enginewindows

I have a google cloud server with windows installed on it, yesterday I rebooted it into safe mode but I forgot to check "networking" option and now I cant connect to it. How can I exit from safe mode from google console?
thanks

Best Answer

You can enable the serial port console of your instance with this command in the cloud shell:

$ gcloud compute instances add-metadata [INSTANCE_NAME]
--metadata=serial-port-enable=1

Then after connect to your instance from the serial port:

$ gcloud compute connect-to-serial-port [INSTANCE_NAME] --port=2

After you enter the windows SAC, you can enter to a CMD session, it prompts you to use your user and password:

cmd
ch -sn cmd0001

In case you forgot the password,you can generate a new one;

$ gcloud beta compute reset-windows-password [INSTANCE-NAME]

Once inside you can stop the safe mode boot and log normal launching:

bcdedit /deletevalue {default} safeboot

And finaly shutdown/start your instance.

Related Solutions

Windows – How to Remote Restart into Safe Mode

If you have admin rights on the remote machine then it's possible.

You need to edit the boot.ini file (usually found on the root of the C: drive)

Open a command prompt on your local machine

type:

EDIT \\MACHINENAME\C$\BOOT.INI

The boot ini file will open which usually looks something like this:

[boot loader]
timeout=30
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional"  
/noexecute=optin /fastdetect

On the end of the last line you need to add

/safeboot:network

the last line will then read something like

multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional"  
/noexecute=optin /fastdetect /safeboot:network

Save the changes and then force a reboot from the command line and it should restart into safe mode with networking. Remember to change the boot.ini file back when you're done!

How to modify the existing access scope of a Google Cloud Platform service account

I believe eventually you will be able to do this using IAM permissions. At the moment I do not see the options to add Cloud DNS roles in the IAM Console. In order to authorize requests to Cloud DNS you must use one of the scopes describe in this article.

i.e.

https://www.googleapis.com/auth/ndev.clouddns.readwrite
https://cloud.google.com/dns/api/authorization

If you are using the default service account, the scope has to be defined during the VM creation in the scope flag.

i.e.

gcloud compute --project "Myproject" instances create "instance-8" --zone "us-central1-f" --machine-type "n1-standard-1" --network "default" --maintenance-policy "MIGRATE" --scopes default="https://www.googleapis.com/auth/devstorage.full_control","https://www.googleapis.com/auth/ndev.clouddns.readwrite" --image "/debian-cloud/debian-8-jessie-v20161020" --boot-disk-size "10" --boot-disk-type "pd-standard" --boot-disk-device-name "instance-8"

If you associated the VM to a non-default service account during its creation, you can add Editor or Owner permissions to that account in the IAM Console. Nevertheless this might provide a wider scope that the one you are looking for.

Best Answer

Related Solutions

Windows – How to Remote Restart into Safe Mode

How to modify the existing access scope of a Google Cloud Platform service account

Related Topic