Windows 10: WinRM issue on Domain Controller - no access to remote execute PowerShell script

I've created a script that self-provisions a virtual server on behalf of a user, that script at the end calls a remote script on the domain controller to handle the rebooting of the device, and manage the device while its rebooting because Restart-Computer -Wait doesn't work.Once the machine finishes restarting, the domain controller invokes other scripts on it to install the software required for that particular build.Now, I previously had everything working, except the acquisition of files from the domain controller's share back on the target machine. For all I can understand, the "doubl

:)

 

Unable to configure WinRM on domain user

Hi everyone,

I'm unable to configure WinRM on a domain computer. I have a simple domain with

1) Windows server 2012

2) A client running Windows 7

If I try to run WinRM on the local Administrator, everything works fine, but if I switch to a domain user, than problems occured.

For example, if i run winrm quickconfig in powershell as the domain Administrator, then I get:

WinRM already is set up to receive requests on this machine.

WSManFault

Message = WinRM cannot process the request. The following error occured while using Negotiate authentication: An unknown security error occurred.

Possible causes are:

-The user name or password specified are invalid.

-Kerberos is used when no authentication method and no user name are specified.

-Kerberos accepts domain user names, but not local user names.

-The Service Principal Name (SPN) for the remote computer name and port does not exist.

-The client and remote computers are in different domains and there is no trust between the two domains.

After checking for the above issues, try the following:

-Check the Event Viewer for events related to authentication.

-Change the authentication method; add the destination computer to the WinRM TrustedHosts configuration setting or use

HTTPS transport.

Note that computers in the TrustedHosts list might not be authenticated.

-For more information about WinRM configuration, run the following command: winrm help config.

Error number: -2144108387 0x8033809D

An unknown security error occurred.

When i run it as local admin, everything goes well.

So, what am I missing?

 

WinRM remoting server with local Adminnistrator account

I have a server Windows 2012R2 Standard in the domain. I can have a powershell remote session when i use a domain account. but it doesnt work using a local account. both user accounts are in the administrators group

the following command is working fine.

but the following command using a local account

raises the following error message

New-PSSession : [myservername] Connecting to remote server myservername failed with the following error message : WinRM cannot process the request. The following error with errorcode 0x80090311 occurred while using Kerberos
authentication: We can't sign you in with this credential because your domain isn't available. Make sure your device is connected to your organization's network and try again. If you previously signed in on this device with another credential, you can sign
in with that credential. Possible causes are: -The user name or password specified are invalid. -Kerberos is used when no authentication method and no user name are specified. -Kerberos accepts domain user names, but not local user names. -The Service Principal
Name (SPN) for the remote computer name and port does not exist. -The client and remote computers are in different domains and there is no trust between the two domains. After checking for the above issues, try the following: -Check the Event Viewer for events
related to authentication. -Change the authentication method; add the destination computer to the WinRM TrustedHosts configuration setting or use HTTPS transport. Note that computers in the TrustedHosts list might not be authenticated. -For more information
about WinRM configuration, run the following command: winrm help config. For more information, see the about_Remote_Troubleshooting Help topic. At line:1 char:1 + New-PSSession -ComputerName myservername -Credential my ... + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : OpenError: (System.Manageme....RemoteRunspace:RemoteRunspace) [New-PSSession], PSRemotingTran sportException + FullyQualifiedErrorId : AuthenticationFailed,PSSessionOpenFailed

 

Programatically execute remote commands from Linux server to Microsoft Windows server

Here is something to try....

• Install Powershell on Linux (https://docs.microsoft.com/en-us/po...ng-powershell-core-on-linux?view=powershell-6)
• Configure the server to allow remote execution (https://www.howtogeek.com/117192/how-to-run-powershell-commands-on-remote-computers/)
• Use powershell in a script on Linux to run the app on Windows

PS: I have not tried this...