6
votes
Unable to configure WinRm https listener
I've made recently HTTPS + WINRM and got exactly the same problems.
The solution is - before invoking command
winrm quickconfig -transport:https
you must do some prerequisite job. to be more ...
- 252
6
votes
How to enable negotiate authentication for winrm
Edit the registry key
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WSMAN\Client.
Set auth_kerberos and auth_negotiate to 1.
Restart the service.
- 171
6
votes
Automatically reconfigure WinRM HTTPS listener with new certificate?
I have recently put together a short script in order to do the same thing you are trying to accomplish, here are the relevant parts. Be aware that you will get an error at the end as the Invoke-...
- 2,218
6
votes
Accepted
How to remotely detect windows has completed patch configuration after reboot
This might sound like kind of a weird answer, but...
There's a PowerShell script for checking to see if there are available updates for Nagios. You could probably use this script or a variant for ...
- 18.5k
5
votes
Set-NetFirewallRule alternative in Windows Server 2008
Unfortunately, you cannot perform this task using the Set-NetFirewallRule cmdlet, as the WMI calls to enable the Firewall cmdlets are only available in 2012+.
For Windows Server 2008, you can use ...
- 479
4
votes
Accepted
winrm access denied for new user
There are many posts about this exact error message. Here are some excerpts that should help! #LMGTFY :)
From a Symantec KB:
https://support.symantec.com/en_US/article.TECH200047.html
This error ...
- 3,304
3
votes
Enabling WinRM HTTPS listener using quickconfig fails on Server 2012
Try the slightly less quick way:
- 55k
3
votes
How to remotely detect windows has completed patch configuration after reboot
Each Windows update patch will write several events in the Setup event log.
Event ID 1 - Initiating changes for package KB####
Event ID 4 - A reboot is necessary before package KB#### can be changed ...
- 4,483
3
votes
Accepted
WinRM-Service is running but can't be reached
As discussed in the comments, local group policy is blocking the winrm quick config from creating http listener on the server - to solve this conflict.
connect to the remote server
run the group ...
- 1,864
3
votes
Accepted
Has anyone solved the double-hop issue with Ansible and Windows clients?
While this is an absolute hack, and I'm sure you've already moved on from this problem, one workaround is to create a scheduled task (using the Windows schtasks command) and execute it immediately to ...
- 146
3
votes
Accepted
Where is WinRMRemoteWMIUsers__ local group in Windows Server 2016?
KB3118385 seems to suggest that you can manually create it. Have you tried doing that?
EDIT:
As Matthew stated below, here are the commands. Thanks Matthew!
net localgroup WinRMRemoteWMIUsers__
...
- 1,132
3
votes
Accepted
Can Windows Admin Center connect to a remote server?
Of course you can do that! Please check the step-by-step guide below:
https://docs.microsoft.com/en-us/windows-server/manage/windows-admin-center/use/get-started
Make sure you have WinRM & ...
- 768
2
votes
How to enable negotiate authentication for winrm
As suggested in this answer, but Service, not Client:
Edit the registry key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WSMAN\Service.
Set auth_kerberos and auth_negotiate to 1.
Restart the ...
- 21
2
votes
How does Windows Event forwarding work with non domain computers? (certificates)
i'm also in a similar situation, i found this msdn page that talks about setting up collectors in non domain situations
https://msdn.microsoft.com/en-us/library/windows/desktop/bb870973(v=vs.85).aspx
- 121
2
votes
Windows Server 2008 R2 Source-Initiated Event Log Forwarding: No Source Servers Reporting
I'm not sure if this is likely to make a difference, but the SubscriptionManager value in my GPO is set to Server=http://server.foo.com:5985/wsman/SubscriptionManager/WEC. Apparently I felt it ...
- 6,403
2
votes
Accepted
Remote PowerShell, WinRM Failures: WinRM cannot complete the operation
Finally solved it, helped by the evidence I recently added to the question:
netsh http show iplist
IP addresses present in the IP listen list:
-------------------------------------------
127.0.0....
- 488
2
votes
Accepted
What is the upper limit (maximum limit ) of WinRM MaxShellsPerUser
According to the Policy Definition, the maximum value for MaxShellsPerUser is 2147483647 (equivalent to [Int32]::MaxValue, indicating no practical upper limit).
- 24.9k
2
votes
Accepted
Windows Remote Management Over Untrusted Domains
This MSDN article shows how to configure WinRM for multi-hop support which also addresses making connections when Kerberos is not an option. Brief summary below.
Windows Remote Management (WinRM) ...
- 759
2
votes
Accepted
Powershell HTTPS not working
From https://support.microsoft.com/en-us/kb/2019527 :
The purpose of configuring WinRM for HTTPS is to encrypt the data
being sent across the wire.
WinRM HTTPS requires a local computer "...
- 55k
2
votes
How to give a user access to the Certificate Store on Windows Server 2012?
Ran into a similar issue with signtool.exe returning
"Error: Store::ImportCertObject() failed." (-2146893808/0x80090010). In my case, I was connecting from Linux via ssh and sshd was hosted in a ...
- 21
2
votes
Accepted
How to give a user access to the Certificate Store on Windows Server 2012?
After days of researching I haven't found the reason at the lowest meaningful level but slightly higher than tat.
The script worked when the user it was logging in as was already logged in ...
- 171
2
votes
Accepted
Win32_LogicalDisk doesn't retrieve network drives from remote machines
Turns out using Win32_MappedLogicalDisk will specifically retrieve network drives even from remote hosts.
Disclaimer: I don't guarantee that this solution is the best (or even accurate) way to ...
- 245
2
votes
Win32_LogicalDisk doesn't retrieve network drives from remote machines
As far as I have researched, there are 2 places Windows stores networks drives (Map drives, if you exclude PS-drives).
One is WMI, as mentioned here, you can get this information in WMI ...
2
votes
Accepted
how to force ansible to use http + kerberos (error WINRM CONNECTION ERROR: 401 Unauthorized.)
If you have installed the kerberos module and ansible_user contains @
(e.g. username@realm), Ansible will first attempt Kerberos
authentication. This method uses the principal you are ...
- 12.7k
2
votes
Accepted
Powershell command to check for admin rights is always giving me false when i RDP into it and true when i use WinRM
Your command always returns true for me when running in an RDP session as an elevated admin. Make sure to run your PowerShell as admininistrator
When using winRM or Enter-PsSession you are ...
- 13.7k
2
votes
Accepted
WinRM Powershell commands not working
The problem was that the .vbs extension was associated with the program Notepad++. And since winrm uses a vbs file to run it's commands, I did the following to re-associate the extension to Microsoft ®...
2
votes
Accepted
The Server Manager WinRM plug-in might be corrupted or missing on W2K12R2
It appears that WinRM/WSMAN configuration has to be reset to default values. Thanks to this post I have found where does it reside. So copying HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\...
- 296
2
votes
The Server Manager WinRM plug-in might be corrupted or missing on W2K12R2
The Link below helped solved the problem without making edit to my registry http://www.lukebrowning.com/sysadmin/windows/windows-server-2012-winrm-corrupt-or-missing/
- 21
2
votes
The Server Manager WinRM plug-in might be corrupted or missing on W2K12R2
In case you have multiple network interfaces (IP addresses) on your server - the key part from the @jide jimoh's blog post is:
netsh http add iplisten 127.0.0.1
Make sure you run this command with ...
- 121
2
votes
Remotely Manage Server Core 2016 Hyper-V Hosting Domain Controller
There's a newer initiative from Microsoft called "Project Honolulu". It's basically a HTML5 Web client for Windows Server management.
https://docs.microsoft.com/en-us/windows-server/manage/honolulu/...
- 768
Only top scored, non community-wiki answers of a minimum length are eligible