header1   header
header
header : : Login header
header
connector   connector
menuleft menuright
submenu   submenu
left
IMPORTANT: PowerShellCommunity.org is moving! - Wednesday, August 15, 2012

PowerShellCommunity.org is moving!  This community software, and the hardware that it sits on, are no longer serving the purposes of this community.  As a result, we have decided to move this community to a new home at PowerShell.org.  PowerShell.org is already up and running with the new community software and in its new location, so please post any new questions that you have on the forums over there instead of posting them on this site.  We've already started getting some great questions from members of the community over there so please, come on over and join us!

While we are going through this transition, this site will remain up for the short term.  New posts may no longer be created on these forums, however replies to existing posts are allowed so that users who posted questions don't have to re-post the same question on the new site.

[UPDATE 28/02/2013] New user registration has been disabled and forums have now been switched to read-only, including for existing posts since all threads that were started should now be completed. If you have a question about content on this site or about PowerShell in general, head over to PowerShell.org and ask it there where there are people actively using the site and answering questions.

If you have any questions, please let us know on the PowerShell.org site.

Thank you,

Kirk "Poshoholic" Munro

 
"winrm quickconfig" and group policy?
Last Post 04 Mar 2010 05:18 AM by aleksandar. 14 Replies.
Printer Friendly
  •  
  •  
  •  
  •  
  •  
Sort:
PrevPrev NextNext
You are not authorized to post a reply.
Author Messages
Ty MoffettUser is Offline
New Member
New Member
Posts:76
Avatar

--
20 Aug 2009 01:18 PM
    I've been looking for a quick way to run "winrm quickconfig" via group policy.  I figure it has to be group policy since elevated privileges are required but I'm open to suggestion.  I don't know much about winrm configuration but I do know if works in my environment with the quickconfig switch.
    Marco ShawUser is Offline
    Veteran Member
    Veteran Member
    Posts:1684
    Avatar

    --
    20 Aug 2009 04:52 PM
    If I remember correctly, winrm is just a VBScript script actually. I think you should go asking this in a GPO forum/group.

    What is your ultimate goal here? Just to enable WinRM 1.0?
    Ty MoffettUser is Offline
    New Member
    New Member
    Posts:76
    Avatar

    --
    21 Aug 2009 05:53 AM
    My ultimate goal is to use Powershell Remoting across our company.
    Marco ShawUser is Offline
    Veteran Member
    Veteran Member
    Posts:1684
    Avatar

    --
    21 Aug 2009 05:58 AM
    The more "official" way to do this is with "Enable-PSRemoting -force" that comes with v2.

    I'd have to research, but I'm assuming "winrm quickconfig" does the exact same thing. Also, you may want to be aware that the WinRM 2.0 RTM won't use ports 80 and 443 by default.
    halr9000User is Offline
    PowerShell MVP, Site Admin
    Advanced Member
    Advanced Member
    Posts:565
    Avatar

    --
    21 Aug 2009 05:59 AM
    I totally agree that GPO is the way this ought to be done. It needs researching, afraid I don't know the answer either.
    Community Director, PowerShellCommunity.org
    Co-host, PowerScripting Podcast
    Author, TechProsaic
    Marco ShawUser is Offline
    Veteran Member
    Veteran Member
    Posts:1684
    Avatar

    --
    21 Aug 2009 06:06 AM
    http://www.microsoft.com/downloads/...layLang=en

    I wonder if Server 2008 R2 has any GPOs relating to PowerShell/WinRM v2...
    Jeff HicksUser is Offline
    New Member
    New Member
    Posts:3
    Avatar

    --
    21 Aug 2009 08:34 AM
    (let me try again as I don't know what happened to my original post)

    At least on Windows Server 2008R2 there is WinRM GPO setting under Computer Configuration\Policies\Administrative Templates\Windows Components\Windows Remote Management.

    Minimum OS is Vista and there are settings for the client and service. Not sure of the effect of combining the policy with Enable-PSRemoting.
    Jeffery Hicks
    Microsoft PowerShell MVP
    JDHITSolutions.com/blog
    Follow me on Twitter

    "Those who forget to script are doomed to repeat their work."

    Now Available: Managing Active Directory With Windows PowerShell: TFM
    Ty MoffettUser is Offline
    New Member
    New Member
    Posts:76
    Avatar

    --
    21 Aug 2009 09:21 AM
    http://blogs.msdn.com/powershell/ar...entmessage

    They make mention that there is a way to enable remoting in group policy. I've requested more information and I'll pass it along in this thread if I get a reply.

    Jeff - Using the templates you linked I can see a number of settings for WinRM (no version specified) on my 2003 network.  I'll see if I can't replicate what Enable-PSRemoting -force does from there.

    This feels like progress. :)
    Ty MoffettUser is Offline
    New Member
    New Member
    Posts:76
    Avatar

    --
    23 Aug 2009 08:23 AM
    http://msdn.microsoft.com/en-us/lib...S.85).aspx "Installation and Configuration for Windows Remote Management"
    This includes group policy configuration.

    http://technet.microsoft.com/en-us/...19498.aspx

    This shows exactly what Enable-PSRemoting does and it lists a great many things that are not included in the previous article.

    I've made a GPO that starts the service, makes the firewall exceptions, and creats a listener. I can't do much more this weekend though. Hopefully I'll know more on Monday.

    Ty MoffettUser is Offline
    New Member
    New Member
    Posts:76
    Avatar

    --
    25 Aug 2009 12:13 PM
    Edit: Useless information.  Solution below.
    Ty MoffettUser is Offline
    New Member
    New Member
    Posts:76
    Avatar

    --
    26 Aug 2009 05:50 AM
    Well it appears that I have this working and as usual I made it a lot harder than it needed to be and then I found the easy solution. :)

    Make a new GPO here (I'm using Win 7 Enterprise with the new RSAT).

    Computer Configuration\Windows Settings\Scripts\Startup

    There is the usual Scripts tab and a new PowerShell Scripts tab.  I simply made a script which contains "Enable-PSRemoting -force" and told it to run PowerShell scripts first.

    I built a new VM to push this on and it complained on the first login but after a reboot there were no more errors and remoting worked.

    -Ty
    Ty MoffettUser is Offline
    New Member
    New Member
    Posts:76
    Avatar

    --
    26 Aug 2009 05:52 AM
    Here's a screenshot.

    halr9000User is Offline
    PowerShell MVP, Site Admin
    Advanced Member
    Advanced Member
    Posts:565
    Avatar

    --
    26 Aug 2009 09:13 AM
    That is awesome! Thanks for the update, I've already got this article marked for discussion on the podcast.
    Community Director, PowerShellCommunity.org
    Co-host, PowerScripting Podcast
    Author, TechProsaic
    Jan Egil RingUser is Offline
    New Member
    New Member
    Posts:45
    Avatar

    --
    04 Mar 2010 05:00 AM
    Also, check out this blog-post:

    "Enable and configure Windows PowerShell Remoting using Group Policy"

    http://blog.crayon.no/blogs/janegil...olicy.aspx
    Jan Egil Ring
    ---------------------
    http://blog.powershell.no
    aleksandarUser is Offline
    New Member
    New Member
    Posts:54
    Avatar

    --
    04 Mar 2010 05:18 AM
    Great blog post. Lots of details. Thanks for a shout-out. We plan to cover more "remoting in an enterprise" topics in a next edition.
    Follow me on Twitter: http://twitter.com/alexandair
    You are not authorized to post a reply.


    Active Forums 4.3
    right
    footer   footer
    footer Many thanks to our original sponsors: Quest Software • SAPIEN Technologies • Compellent • Microsoft footer
    footer   footer