4
votes
Accepted
WinRM-Service is running but can't be reached
As discussed in the comments, local group policy is blocking the winrm quick config from creating http listener on the server - to solve this conflict.
connect to the remote server
run the group ...
- 1,964
4
votes
Accepted
winrm access denied for new user
There are many posts about this exact error message. Here are some excerpts that should help! #LMGTFY :)
From a Symantec KB:
https://support.symantec.com/en_US/article.TECH200047.html
This error ...
- 3,469
4
votes
Accepted
Can Windows Admin Center connect to a remote server?
Of course you can do that! Please check the step-by-step guide below:
https://docs.microsoft.com/en-us/windows-server/manage/windows-admin-center/use/get-started
Make sure you have WinRM & ...
- 1,060
4
votes
Accepted
Why does a scheduled task access the database as anonymous (vs configured acct)?
Turns out this is similar to the double hop issue. To resolve it, I ran Enable-WSManCredSSP Client –DelegateComputer <schedTaskHost> on the task server and Enable-WSManCredSSP Server on the SQL ...
- 6,432
4
votes
Accepted
Use openssl 3 to create a self-signed certificate just like what "New-SelfSignedCertificate" can
The openssl x509 -req without -copy_extensions does not copy the extensions from the CSR, so you would have to add, e.g., -copy_extensions=copyall.
Also, you specify the -days 3650 in a wrong command; ...
- 49.8k
3
votes
Accepted
Has anyone solved the double-hop issue with Ansible and Windows clients?
While this is an absolute hack, and I'm sure you've already moved on from this problem, one workaround is to create a scheduled task (using the Windows schtasks command) and execute it immediately to ...
- 146
3
votes
Accepted
Where is WinRMRemoteWMIUsers__ local group in Windows Server 2016?
KB3118385 seems to suggest that you can manually create it. Have you tried doing that?
EDIT:
As Matthew stated below, here are the commands. Thanks Matthew!
net localgroup WinRMRemoteWMIUsers__
...
- 1,142
3
votes
Enable WinRM for domain user
There are two methods (of which I am aware) to achieve this.
First (the easiest), you can add the desired accounts to the scope-specific seuciry group "Remote Management Users" group (the domain ...
- 1,878
3
votes
Why does a scheduled task access the database as anonymous (vs configured acct)?
The issue seems to be related to Kerberos delegation.
Things that are important: using correct machine name, service accounts, and registered SPNs correctly.
Try the following:
Validate if your ...
- 2,040
2
votes
How to enable negotiate authentication for winrm
As suggested in this answer, but Service, not Client:
Edit the registry key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WSMAN\Service.
Set auth_kerberos and auth_negotiate to 1.
Restart the ...
- 21
2
votes
Win32_LogicalDisk doesn't retrieve network drives from remote machines
As far as I have researched, there are 2 places Windows stores networks drives (Map drives, if you exclude PS-drives).
One is WMI, as mentioned here, you can get this information in WMI ...
2
votes
How to give a user access to the Certificate Store on Windows Server 2012?
Ran into a similar issue with signtool.exe returning
"Error: Store::ImportCertObject() failed." (-2146893808/0x80090010). In my case, I was connecting from Linux via ssh and sshd was hosted in a ...
- 21
2
votes
The Server Manager WinRM plug-in might be corrupted or missing on W2K12R2
In case you have multiple network interfaces (IP addresses) on your server - the key part from the @jide jimoh's blog post is:
netsh http add iplisten 127.0.0.1
Make sure you run this command with ...
- 121
2
votes
The Server Manager WinRM plug-in might be corrupted or missing on W2K12R2
The Link below helped solved the problem without making edit to my registry http://www.lukebrowning.com/sysadmin/windows/windows-server-2012-winrm-corrupt-or-missing/
- 21
2
votes
Accepted
The Server Manager WinRM plug-in might be corrupted or missing on W2K12R2
It appears that WinRM/WSMAN configuration has to be reset to default values. Thanks to this post I have found where does it reside. So copying HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\...
- 296
2
votes
Accepted
WinRM Powershell commands not working
The problem was that the .vbs extension was associated with the program Notepad++. And since winrm uses a vbs file to run it's commands, I did the following to re-associate the extension to Microsoft ®...
2
votes
Remotely Manage Server Core 2016 Hyper-V Hosting Domain Controller
There's a newer initiative from Microsoft called "Project Honolulu". It's basically a HTML5 Web client for Windows Server management.
https://docs.microsoft.com/en-us/windows-server/manage/honolulu/...
- 1,060
2
votes
Accepted
Powershell command to check for admin rights is always giving me false when i RDP into it and true when i use WinRM
Your command always returns true for me when running in an RDP session as an elevated admin. Make sure to run your PowerShell as admininistrator
When using winRM or Enter-PsSession you are ...
- 14.2k
2
votes
Chef Knife command - PowerShell "query session" failing with return code 1, although command is executed successfully
Looks like its something to do with WinRM. I replaced "query session" with "qwinsta" which solved the problem.
Need to check RCA on Winrm
- 141
2
votes
WinRM will not connect to remote computer in my Domain
If you haven't configured your list of allowed network addresses/trusted hosts in Group Policy/Local Policy, that may be one reason.
Administrative Templates > Windows Components > Windows Remote ...
- 36.8k
2
votes
PowerShell remoting works with local IPs but not with the public IP on an Azure VM
Ok, trying to summarize here.
If you get no connection at all when trying to connect from a remote machine, then it's definitely a networking and/or firewall issue. Please note that being able to ...
- 71.3k
2
votes
Ansible error when trying to ping Windows 10 host. No winrm module
Module or plugin requirements must be installed to the python that uses them. As this is for a plugin, it must be to the python running the ansible or ansible-playbook script.
List the installed ...
- 33.3k
2
votes
Accepted
Powershell Remote PSSession Failing - Domain Administrator Account - Error 0x80090322
I got it resolved.
It was an SPN issue. The HTTP/Server1 and HTTP/Server1.domain were being used by a random user account named after the server.
After disabling the account and moving the SPN's to ...
- 41
2
votes
Accepted
Why does connecting to SMB share also use wsman
I don't have an answer as to "why", but here's a forum post by someone that shows that SMB3 connections from Win10 will also attempt to connect via wsman.
https://answers.microsoft.com/en-us/...
- 36.2k
2
votes
Accepted
How to securely access a machine using PowerShell remoting over the Internet?
Just use a trusted certificate instead of the self-signed one.
Using the ACME protocol with one of the free CAs (Let's Encrypt, ZeroSSL, Buypass Go SSL) is simple and secure. WinACME is an ACME client ...
- 129
1
vote
Installing PKI Client cmdlet on Windows 2008 R2
Yes, you're interpreting that correctly. Those cmdlets are not available for Windows Server 2008 R2. If you click the "Other Versions" link on that page, you'll see what other versions of the OS ...
- 54k
1
vote
Accepted
WinRM service is running but will not respond
An article on the WinRM architecture led me to investigate Http.sys. Since IIS is running normally, I wouldn't have suspected Http.sys. The command netsh http show urlacl showed there were no reserved ...
- 133
1
vote
Can't connect to WinRM on Domain controller
I can connect to this server using RDP only, but no success with
WinRM.
To Winrm Azure VM, we should add port 5985 to Azure VM NSG inbound rules. Also we should add port 5985 to Windows server 2016 ...
- 2,399
1
vote
WinRM qc error -2144108269 0x80338113
uncomment the line " 127.0.0.1 localhost " in C:\Windows\System32\drivers\etc\hosts file, then it works
- 11
1
vote
Changing WinRM settings from Script
Edit Group Policy.
Administrative Templates -> Windows Component -> Winodws Remote Management(WinRM) -> WinRM Client -> make all as not configured
enter image description here
Administrative Templates ...
Only top scored, non community-wiki answers of a minimum length are eligible