header
header Register : : Login header
header
divider
menuleft
menuright
submenu
left

We have a new sponsor!  Introducting Pragma Systems.  See the home page for details.

"winrm quickconfig" and group policy?
Last Post 04 Mar 2010 02:18 PM by aleksandar. 14 Replies.
Printer Friendly
Sort:
PrevPrev NextNext
You are not authorized to post a reply.
Author Messages
tmoffettUser is Offline
New Member
New Member
Posts:39
Avatar

--
20 Aug 2009 10:18 PM  
I've been looking for a quick way to run "winrm quickconfig" via group policy.  I figure it has to be group policy since elevated privileges are required but I'm open to suggestion.  I don't know much about winrm configuration but I do know if works in my environment with the quickconfig switch.
marco.shawUser is Offline
Site Moderator
Advanced Member
Advanced Member
Posts:593
Avatar

--
21 Aug 2009 01:52 AM  
If I remember correctly, winrm is just a VBScript script actually. I think you should go asking this in a GPO forum/group.

What is your ultimate goal here? Just to enable WinRM 1.0?
Marco

*Microsoft MVP - Windows PowerShell
https://mvp.support.microsoft.com/profile/Marco.Shaw
*Co-Author - Sams Windows PowerShell Unleashed 2nd Edition
*Blog - http://marcoshaw.blogspot.com
tmoffettUser is Offline
New Member
New Member
Posts:39
Avatar

--
21 Aug 2009 02:53 PM  
My ultimate goal is to use Powershell Remoting across our company.
marco.shawUser is Offline
Site Moderator
Advanced Member
Advanced Member
Posts:593
Avatar

--
21 Aug 2009 02:58 PM  
The more "official" way to do this is with "Enable-PSRemoting -force" that comes with v2.

I'd have to research, but I'm assuming "winrm quickconfig" does the exact same thing. Also, you may want to be aware that the WinRM 2.0 RTM won't use ports 80 and 443 by default.
Marco

*Microsoft MVP - Windows PowerShell
https://mvp.support.microsoft.com/profile/Marco.Shaw
*Co-Author - Sams Windows PowerShell Unleashed 2nd Edition
*Blog - http://marcoshaw.blogspot.com
halr9000User is Offline
PowerShell MVP, Site Admin
Advanced Member
Advanced Member
Posts:524
Avatar

--
21 Aug 2009 02:59 PM  
I totally agree that GPO is the way this ought to be done. It needs researching, afraid I don't know the answer either.
Community Director, PowerShellCommunity.org
Co-host, PowerScripting Podcast
Author, TechProsaic
marco.shawUser is Offline
Site Moderator
Advanced Member
Advanced Member
Posts:593
Avatar

--
21 Aug 2009 03:06 PM  
http://www.microsoft.com/downloads/details.aspx?FamilyID=2917a564-dbbc-4da7-82c8-fe08b3ef4e6d&DisplayLang=en

I wonder if Server 2008 R2 has any GPOs relating to PowerShell/WinRM v2...
Marco

*Microsoft MVP - Windows PowerShell
https://mvp.support.microsoft.com/profile/Marco.Shaw
*Co-Author - Sams Windows PowerShell Unleashed 2nd Edition
*Blog - http://marcoshaw.blogspot.com
jhicksUser is Offline
New Member
New Member
Posts:3
Avatar

--
21 Aug 2009 05:34 PM  
(let me try again as I don't know what happened to my original post)

At least on Windows Server 2008R2 there is WinRM GPO setting under Computer Configuration\Policies\Administrative Templates\Windows Components\Windows Remote Management.

Minimum OS is Vista and there are settings for the client and service. Not sure of the effect of combining the policy with Enable-PSRemoting.
Jeffery Hicks
Microsoft PowerShell MVP
JDHITSolutions.com/blog
Follow me on Twitter

"Those who forget to script are doomed to repeat their work."

Now Available: Managing Active Directory With Windows PowerShell: TFM
tmoffettUser is Offline
New Member
New Member
Posts:39
Avatar

--
21 Aug 2009 06:21 PM  
http://blogs.msdn.com/powershell/archive/2009/04/30/enable-psremoting.aspx?CommentPosted=true#commentmessage

They make mention that there is a way to enable remoting in group policy. I've requested more information and I'll pass it along in this thread if I get a reply.

Jeff - Using the templates you linked I can see a number of settings for WinRM (no version specified) on my 2003 network.  I'll see if I can't replicate what Enable-PSRemoting -force does from there.

This feels like progress. :)
tmoffettUser is Offline
New Member
New Member
Posts:39
Avatar

--
23 Aug 2009 05:23 PM  
http://msdn.microsoft.com/en-us/library/aa384372(VS.85).aspx "Installation and Configuration for Windows Remote Management"
This includes group policy configuration.

http://technet.microsoft.com/en-us/library/dd819498.aspx

This shows exactly what Enable-PSRemoting does and it lists a great many things that are not included in the previous article.

I've made a GPO that starts the service, makes the firewall exceptions, and creats a listener. I can't do much more this weekend though. Hopefully I'll know more on Monday.

tmoffettUser is Offline
New Member
New Member
Posts:39
Avatar

--
25 Aug 2009 09:13 PM  
Edit: Useless information.  Solution below.
tmoffettUser is Offline
New Member
New Member
Posts:39
Avatar

--
26 Aug 2009 02:50 PM  
Well it appears that I have this working and as usual I made it a lot harder than it needed to be and then I found the easy solution. :)

Make a new GPO here (I'm using Win 7 Enterprise with the new RSAT).

Computer Configuration\Windows Settings\Scripts\Startup

There is the usual Scripts tab and a new PowerShell Scripts tab.  I simply made a script which contains "Enable-PSRemoting -force" and told it to run PowerShell scripts first.

I built a new VM to push this on and it complained on the first login but after a reboot there were no more errors and remoting worked.

-Ty
tmoffettUser is Offline
New Member
New Member
Posts:39
Avatar

--
26 Aug 2009 02:52 PM  
Here's a screenshot.

halr9000User is Offline
PowerShell MVP, Site Admin
Advanced Member
Advanced Member
Posts:524
Avatar

--
26 Aug 2009 06:13 PM  
That is awesome! Thanks for the update, I've already got this article marked for discussion on the podcast.
Community Director, PowerShellCommunity.org
Co-host, PowerScripting Podcast
Author, TechProsaic
janegilringUser is Offline
New Member
New Member
Posts:30
Avatar

--
04 Mar 2010 02:00 PM  
Also, check out this blog-post:

"Enable and configure Windows PowerShell Remoting using Group Policy"

http://blog.crayon.no/blogs/janegil/archive/2010/03/04/enable_2D00_and_2D00_configure_2D00_windows_2D00_powershell_2D00_remoting_2D00_using_2D00_group_2D00_policy.aspx
Jan Egil Ring
---------------------
http://blog.powershell.no
http://powershellug.ning.com
aleksandarUser is Offline
New Member
New Member
Posts:45
Avatar

--
04 Mar 2010 02:18 PM  
Great blog post. Lots of details. Thanks for a shout-out. We plan to cover more "remoting in an enterprise" topics in a next edition.
Follow me on Twitter: http://twitter.com/alexandair
You are not authorized to post a reply.

Active Forums 4.1
right
   
footer Sponsored by Quest Software • SAPIEN Technologies • Compellent • Microsoft Windows Server 2008 footer
footer