{"id":4140,"date":"2022-08-10T10:50:47","date_gmt":"2022-08-10T18:50:47","guid":{"rendered":"https:\/\/tungle.ca\/?p=4140"},"modified":"2023-03-13T17:34:09","modified_gmt":"2023-03-14T01:34:09","slug":"enable-winrm-powershell-remoting-on-domain-environment-via-gpo","status":"publish","type":"post","link":"https:\/\/tungle.ca\/?p=4140","title":{"rendered":"Enable WinRM (PowerShell remoting) on domain environment via GPO"},"content":{"rendered":"\n<p>There are several steps to enable WinRM on domain environment.<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Allow remote server management through WinRM service and create a WinRM listener in WinRM service.<\/li><li>Enable WinRM service<\/li><li>Allow WinRM connection via Windows FireWall<\/li><\/ul>\n\n\n\n<p>Create a new GPO (Enable WinRM) to enable WinRM on domain.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"894\" height=\"373\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/1-1.png\" alt=\"\" class=\"wp-image-4142\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/1-1.png 894w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/1-1-300x125.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/1-1-768x320.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/1-1-200x83.png 200w\" sizes=\"auto, (max-width: 894px) 100vw, 894px\" \/><\/figure>\n\n\n\n<p>Right click the &#8220;Enable WinRM GPO&#8221;, select &#8220;Edit&#8221;. Go to&nbsp;Computer Configuration&nbsp;&#8211; Administrative Templates  Windows Components&nbsp;&#8211;&nbsp;Windows Remote Management (WinRM)&nbsp;&#8211; WinRM Service. Then, select&nbsp;Enabled&nbsp;for the setting&nbsp;&#8220;Allow remote service management through WinRM&#8221;. Next, double click &#8220;Allow remote server management through WinRM&#8221;&nbsp;setting, enter asterisk (<code>*<\/code>) for both IPv4 filter&nbsp;and&nbsp;IPv6 filter&nbsp;as a screenshot below to create a WinRM listener for WinRM service. Click Apply and OK.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"796\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/2-1024x796.png\" alt=\"\" class=\"wp-image-4143\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/2-1024x796.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/2-300x233.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/2-768x597.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/2-200x156.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/2.png 1026w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Next, move on to enable the WinRM Service on Windows domain-joined computer.<\/p>\n\n\n\n<p>Go to&nbsp;Computer Configurations &#8211; Preferences  &#8211; Control Panel Settings. Right-click in the Services window and click&nbsp;New &#8211; Service. Change&nbsp;Startup&nbsp;to&nbsp;Automatic (Delayed Start). Find and select the service name&nbsp;is WinRM. Select&nbsp;&#8220;Start service&#8221; from the &#8220;Service action&#8221; and then click&nbsp;OK.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"732\" height=\"832\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/18.png\" alt=\"\" class=\"wp-image-4158\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/18.png 732w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/18-264x300.png 264w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/18-176x200.png 176w\" sizes=\"auto, (max-width: 732px) 100vw, 732px\" \/><\/figure>\n\n\n\n<p>Finally, configure Windows FireWall to allow traffic to WinRM service via TCP port 5985 (HTTP) or TCP port 5986 (over SSL). <\/p>\n\n\n\n<p>Go  to&nbsp;Computer Configuration&nbsp;&#8211; Windows Settings&nbsp;&#8211; Security Settings&nbsp;&#8211; Windows Defender Firewall with Advanced Security.  Click on the&nbsp;&#8220;New Inbound Rule&#8221;to create a new inbound rule and select&nbsp;Windows Remote Management&nbsp;as a following screenshot.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"709\" height=\"559\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/5.png\" alt=\"\" class=\"wp-image-4145\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/5.png 709w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/5-300x237.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/5-200x158.png 200w\" sizes=\"auto, (max-width: 709px) 100vw, 709px\" \/><\/figure>\n\n\n\n<p>Select &#8220;Domain\/Private network&nbsp;rule&#8221; under rules setting to allow remote connections from only Private and Domain profile.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"706\" height=\"563\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/6.png\" alt=\"\" class=\"wp-image-4146\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/6.png 706w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/6-300x239.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/6-200x159.png 200w\" sizes=\"auto, (max-width: 706px) 100vw, 706px\" \/><\/figure>\n\n\n\n<p>Leave the &#8220;Allow the connection&#8221; as a default setting in the next page. Then, click Finish to create the rule.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"701\" height=\"559\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/7.png\" alt=\"\" class=\"wp-image-4147\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/7.png 701w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/7-300x239.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/7-200x159.png 200w\" sizes=\"auto, (max-width: 701px) 100vw, 701px\" \/><\/figure>\n\n\n\n<p>Link the GPO to Windows domain-joined computers. <\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"751\" height=\"606\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/8.png\" alt=\"\" class=\"wp-image-4148\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/8.png 751w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/8-300x242.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/8-200x161.png 200w\" sizes=\"auto, (max-width: 751px) 100vw, 751px\" \/><\/figure>\n\n\n\n<p>Restarted Windows domain-joined computers to apply the GPO.<\/p>\n\n\n\n<p>The port 5985 is enabled in Windows 10 machine.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"635\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/12-1024x635.png\" alt=\"\" class=\"wp-image-4149\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/12-1024x635.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/12-300x186.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/12-768x476.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/12-1536x952.png 1536w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/12-200x124.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/12.png 1568w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>From Windows 2016 server, test the port 5985 is reachable on Windows 10 PC.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code lang=\"powershell\" class=\"language-powershell\">Test-NetConnection -ComputerName Win10-PC -Port 5985<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"363\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/13-1024x363.png\" alt=\"\" class=\"wp-image-4150\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/13-1024x363.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/13-300x106.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/13-768x272.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/13-200x71.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/13.png 1316w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Test PowerShell Remoting is enabled on Windows 10 computer.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code lang=\"powershell\" class=\"language-powershell\">Invoke-command -ComputerNme Win10-PC -Scriptblock {hostname}<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"151\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/14-1024x151.png\" alt=\"\" class=\"wp-image-4151\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/14-1024x151.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/14-300x44.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/14-768x113.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/14-200x30.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/14.png 1462w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<pre class=\"wp-block-code\"><code lang=\"powershell\" class=\"language-powershell\">Enter-PSSession -computerName Win10-PC <\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"188\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/15-1024x188.png\" alt=\"\" class=\"wp-image-4152\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/15-1024x188.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/15-300x55.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/15-768x141.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/15-200x37.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/15.png 1472w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<pre class=\"wp-block-code\"><code lang=\"powershell\" class=\"language-powershell line-numbers\">Invoke-command -ComputerName Win10-PC -Scriptblock {Restart-Computer}<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"80\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/17-1024x80.png\" alt=\"\" class=\"wp-image-4154\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/17-1024x80.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/17-300x23.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/17-768x60.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/17-1536x120.png 1536w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/17-200x16.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/17.png 1616w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1288\" height=\"900\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/16-1024x716.png\" alt=\"\" class=\"wp-image-4153\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/16-1024x716.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/16-300x210.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/16-768x537.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/16-200x140.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/09\/16.png 1288w\" sizes=\"auto, (max-width: 1288px) 100vw, 1288px\" \/><\/figure>\n","protected":false},"excerpt":{"rendered":"<p>There are several steps to enable WinRM on domain environment. Allow remote server management through WinRM service and create a WinRM listener in WinRM service. Enable WinRM service Allow WinRM connection via Windows FireWall Create a new GPO (Enable WinRM) to enable WinRM on domain. Right click the &#8220;Enable WinRM GPO&#8221;, select &#8220;Edit&#8221;. Go to&nbsp;Computer [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[9,7],"tags":[10,12],"class_list":["post-4140","post","type-post","status-publish","format-standard","hentry","category-microsoft","category-powershell","tag-microsoft","tag-powershell"],"_links":{"self":[{"href":"https:\/\/tungle.ca\/index.php?rest_route=\/wp\/v2\/posts\/4140","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tungle.ca\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tungle.ca\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tungle.ca\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/tungle.ca\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=4140"}],"version-history":[{"count":7,"href":"https:\/\/tungle.ca\/index.php?rest_route=\/wp\/v2\/posts\/4140\/revisions"}],"predecessor-version":[{"id":4307,"href":"https:\/\/tungle.ca\/index.php?rest_route=\/wp\/v2\/posts\/4140\/revisions\/4307"}],"wp:attachment":[{"href":"https:\/\/tungle.ca\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=4140"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tungle.ca\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=4140"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tungle.ca\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=4140"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}