Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

ServerFault Windows experts: please consider the following use case:

  1. I have 2 Windows 2008 Server SP2 boxes let’s call them – SOURCE, CLIENT.
  2. On SOURCE: I create a new user called 'normal'. Just a plain user - no special privileges.
  3. On CLIENT: I run the following from a command prompt winrm get wmi/root/cimv2/Win32_UTCTime -r:SOURCE -u:normal -p:NormalPassword
  4. I get an output containing WSManFault: Message = Access is denied.
  5. On CLIENT: I repeat step 3 with the administrator identity, i.e. winrm get wmi/root/cimv2/Win32_UTCTime -r:SOURCE -u:Administrator -p:AdminPassword
  6. I get the current UTC time at SOURCE.

The question is, what are the least privileges I need to assign to the user 'normal' to ensure that Step 3 behaves like Step 5. In other words, what's the least privilege to enable WinRM access for a non-Admin account?

share|improve this question
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.