How to Fix Powershell Remoting and WinRM with SPN's

Fixing WinRM and Powershell remoting with SPN's is the most common authentication issue I've seen for random servers not being reachable by Kerberos and despite that, it doesn't seem to be well documented so I decided to make a video on it. So users of Powershell and WinRM can resolve this issue

Follow us on

[sathishkumart]

Brilliant !!! Stuck with this for days, resolved it in minutes.

[BigBadJohn]

From the source computer, can this be done on a machine using Powershell that is not a Domain joined computer (Workgroup Standalone Machine) or does Powershell need to be running/installed under a Windows Server for this to work? My end goal is to use Powershell to remotely connect to two non-domain joined computers & run commands in the background to the destination computer.


[10.228.253.X] Connecting to remote server 10.228.253.X failed with the following error message : The WinRM client
cannot process the request. If the authentication scheme is different from Kerberos, or if the client computer is not
joined to a domain, then HTTPS transport must be used or the destination machine must be added to the TrustedHosts
configuration setting. Use winrm.cmd to configure TrustedHosts. Note that computers in the TrustedHosts list might not
be authenticated. You can get more information about that by running the following command: winrm help config. For
more information, see the about_Remote_Troubleshooting Help topic.
+ CategoryInfo : OpenError: (10.228.253.X:String) [], PSRemotingTransportException
+ FullyQualifiedErrorId : ServerNotTrusted, PSSessionStateBroken

[alejandroparrello]

Hi mr tips! thx for the video!
could you explain how can I block the use of winrm using windows firewall, i just want to allow 1 or 2 ip/host to manage other PCs on the domian network. i hope you understand what i mean 🤞😉 Regards from Argentina 👋

[milevyo]

live is cruel 👾, from 5994 views for so far, only 38 likes!!!. otherwise, good job man. 👍 ⭐⭐⭐⭐⭐

[mohitjangir]

winrm protocol support in win like ssh in win, install winrm lib using python pip installer, then install powershell, use some script in powershell to enable winrm in win in ansible either manually enable, for enabling in inv write conn type winrm pass admin host

[theAboodNet]

Actually winRM runs under Network Service account not local service account.