Hot answers tagged

6 votes

Unable to configure WinRm https listener

I've made recently HTTPS + WINRM and got exactly the same problems. The solution is - before invoking command winrm quickconfig -transport:https you must do some prerequisite job. to be more ...
user avatar
  • 252
6 votes

How to enable negotiate authentication for winrm

Edit the registry key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WSMAN\Client. Set auth_kerberos and auth_negotiate to 1. Restart the service.
user avatar
  • 171
6 votes

Automatically reconfigure WinRM HTTPS listener with new certificate?

I have recently put together a short script in order to do the same thing you are trying to accomplish, here are the relevant parts. Be aware that you will get an error at the end as the Invoke-...
user avatar
  • 2,218
6 votes
Accepted

How to remotely detect windows has completed patch configuration after reboot

This might sound like kind of a weird answer, but... There's a PowerShell script for checking to see if there are available updates for Nagios. You could probably use this script or a variant for ...
user avatar
5 votes

Set-NetFirewallRule alternative in Windows Server 2008

Unfortunately, you cannot perform this task using the Set-NetFirewallRule cmdlet, as the WMI calls to enable the Firewall cmdlets are only available in 2012+. For Windows Server 2008, you can use ...
user avatar
4 votes
Accepted

winrm access denied for new user

There are many posts about this exact error message. Here are some excerpts that should help! #LMGTFY :) From a Symantec KB: https://support.symantec.com/en_US/article.TECH200047.html This error ...
user avatar
  • 3,304
3 votes

Enabling WinRM HTTPS listener using quickconfig fails on Server 2012

Try the slightly less quick way:
user avatar
  • 55k
3 votes

How to remotely detect windows has completed patch configuration after reboot

Each Windows update patch will write several events in the Setup event log. Event ID 1 - Initiating changes for package KB#### Event ID 4 - A reboot is necessary before package KB#### can be changed ...
user avatar
  • 4,483
3 votes
Accepted

WinRM-Service is running but can't be reached

As discussed in the comments, local group policy is blocking the winrm quick config from creating http listener on the server - to solve this conflict. connect to the remote server run the group ...
user avatar
  • 1,864
3 votes
Accepted

Has anyone solved the double-hop issue with Ansible and Windows clients?

While this is an absolute hack, and I'm sure you've already moved on from this problem, one workaround is to create a scheduled task (using the Windows schtasks command) and execute it immediately to ...
user avatar
3 votes
Accepted

Where is WinRMRemoteWMIUsers__ local group in Windows Server 2016?

KB3118385 seems to suggest that you can manually create it. Have you tried doing that? EDIT: As Matthew stated below, here are the commands. Thanks Matthew! net localgroup WinRMRemoteWMIUsers__ ...
user avatar
  • 1,132
3 votes
Accepted

Can Windows Admin Center connect to a remote server?

Of course you can do that! Please check the step-by-step guide below: https://docs.microsoft.com/en-us/windows-server/manage/windows-admin-center/use/get-started Make sure you have WinRM & ...
user avatar
  • 768
2 votes

How to enable negotiate authentication for winrm

As suggested in this answer, but Service, not Client: Edit the registry key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WSMAN\Service. Set auth_kerberos and auth_negotiate to 1. Restart the ...
user avatar
2 votes

How does Windows Event forwarding work with non domain computers? (certificates)

i'm also in a similar situation, i found this msdn page that talks about setting up collectors in non domain situations https://msdn.microsoft.com/en-us/library/windows/desktop/bb870973(v=vs.85).aspx
user avatar
  • 121
2 votes

Windows Server 2008 R2 Source-Initiated Event Log Forwarding: No Source Servers Reporting

I'm not sure if this is likely to make a difference, but the SubscriptionManager value in my GPO is set to Server=http://server.foo.com:5985/wsman/SubscriptionManager/WEC. Apparently I felt it ...
user avatar
  • 6,403
2 votes
Accepted

Remote PowerShell, WinRM Failures: WinRM cannot complete the operation

Finally solved it, helped by the evidence I recently added to the question: netsh http show iplist IP addresses present in the IP listen list: ------------------------------------------- 127.0.0....
user avatar
  • 488
2 votes
Accepted

What is the upper limit (maximum limit ) of WinRM MaxShellsPerUser

According to the Policy Definition, the maximum value for MaxShellsPerUser is 2147483647 (equivalent to [Int32]::MaxValue, indicating no practical upper limit).
user avatar
2 votes
Accepted

Windows Remote Management Over Untrusted Domains

This MSDN article shows how to configure WinRM for multi-hop support which also addresses making connections when Kerberos is not an option. Brief summary below. Windows Remote Management (WinRM) ...
user avatar
2 votes
Accepted

Powershell HTTPS not working

From https://support.microsoft.com/en-us/kb/2019527 : The purpose of configuring WinRM for HTTPS is to encrypt the data being sent across the wire. WinRM HTTPS requires a local computer "...
user avatar
  • 55k
2 votes

How to give a user access to the Certificate Store on Windows Server 2012?

Ran into a similar issue with signtool.exe returning "Error: Store::ImportCertObject() failed." (-2146893808/0x80090010). In my case, I was connecting from Linux via ssh and sshd was hosted in a ...
user avatar
2 votes
Accepted

How to give a user access to the Certificate Store on Windows Server 2012?

After days of researching I haven't found the reason at the lowest meaningful level but slightly higher than tat. The script worked when the user it was logging in as was already logged in ...
user avatar
  • 171
2 votes
Accepted

Win32_LogicalDisk doesn't retrieve network drives from remote machines

Turns out using Win32_MappedLogicalDisk will specifically retrieve network drives even from remote hosts. Disclaimer: I don't guarantee that this solution is the best (or even accurate) way to ...
user avatar
  • 245
2 votes

Win32_LogicalDisk doesn't retrieve network drives from remote machines

As far as I have researched, there are 2 places Windows stores networks drives (Map drives, if you exclude PS-drives). One is WMI, as mentioned here, you can get this information in WMI ...
user avatar
2 votes
Accepted

how to force ansible to use http + kerberos (error WINRM CONNECTION ERROR: 401 Unauthorized.)

If you have installed the kerberos module and ansible_user contains @ (e.g. username@realm), Ansible will first attempt Kerberos authentication. This method uses the principal you are ...
user avatar
  • 12.7k
2 votes
Accepted

Powershell command to check for admin rights is always giving me false when i RDP into it and true when i use WinRM

Your command always returns true for me when running in an RDP session as an elevated admin. Make sure to run your PowerShell as admininistrator When using winRM or Enter-PsSession you are ...
user avatar
2 votes
Accepted

WinRM Powershell commands not working

The problem was that the .vbs extension was associated with the program Notepad++. And since winrm uses a vbs file to run it's commands, I did the following to re-associate the extension to Microsoft ®...
user avatar
2 votes
Accepted

The Server Manager WinRM plug-in might be corrupted or missing on W2K12R2

It appears that WinRM/WSMAN configuration has to be reset to default values. Thanks to this post I have found where does it reside. So copying HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\...
user avatar
2 votes

The Server Manager WinRM plug-in might be corrupted or missing on W2K12R2

The Link below helped solved the problem without making edit to my registry http://www.lukebrowning.com/sysadmin/windows/windows-server-2012-winrm-corrupt-or-missing/
user avatar
2 votes

The Server Manager WinRM plug-in might be corrupted or missing on W2K12R2

In case you have multiple network interfaces (IP addresses) on your server - the key part from the @jide jimoh's blog post is: netsh http add iplisten 127.0.0.1 Make sure you run this command with ...
user avatar
  • 121
2 votes

Remotely Manage Server Core 2016 Hyper-V Hosting Domain Controller

There's a newer initiative from Microsoft called "Project Honolulu". It's basically a HTML5 Web client for Windows Server management. https://docs.microsoft.com/en-us/windows-server/manage/honolulu/...
user avatar
  • 768

Only top scored, non community-wiki answers of a minimum length are eligible