ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    WinRM: Security Question

    IT Discussion
    winrm remote management powershell
    7
    22
    1.6k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • DashrenderD
      Dashrender @gjacobse
      last edited by

      @gjacobse said in WinRM: Security Question:

      @dashrender said in WinRM: Security Question:

      @gjacobse said in WinRM: Security Question:

      Here, it's turned off by design as a security risk, which to some degree I can see and agree with, but now I'll have to annoy users and in some cases drive across town to perform a minor task I could have done with PS.

      Do they not have any other remote management system in place of any kind?
      Almost anything would be better than driving across town.

      We are using Manage Engine for remote -

      Does ME not have the ability to run commands on the machines? I know SC and MC both do.

      dafyreD EddieJenningsE 2 Replies Last reply Reply Quote 0
      • EddieJenningsE
        EddieJennings @Dashrender
        last edited by

        @dashrender said in WinRM: Security Question:

        The same ones for SSH, only those that affect remote powershell 😉

        Yeah, that's the point that I'm getting at. While, yes, making WinRM available and using remote PowerShell is a potential vector for attack, preventing management automation seems like a greater risk.

        1 Reply Last reply Reply Quote 0
        • dafyreD
          dafyre @Dashrender
          last edited by

          @dashrender said in WinRM: Security Question:

          @gjacobse said in WinRM: Security Question:

          @dashrender said in WinRM: Security Question:

          @gjacobse said in WinRM: Security Question:

          Here, it's turned off by design as a security risk, which to some degree I can see and agree with, but now I'll have to annoy users and in some cases drive across town to perform a minor task I could have done with PS.

          Do they not have any other remote management system in place of any kind?
          Almost anything would be better than driving across town.

          We are using Manage Engine for remote -

          Does ME not have the ability to run commands on the machines? I know SC and MC both do.

          But don't SC and MC both require Agents? If you need to have an Agent installed then doesn't that make WinRM unnecessary?

          DashrenderD 1 Reply Last reply Reply Quote 0
          • EddieJenningsE
            EddieJennings @Dashrender
            last edited by

            @dashrender said in WinRM: Security Question:

            @gjacobse said in WinRM: Security Question:

            @dashrender said in WinRM: Security Question:

            @gjacobse said in WinRM: Security Question:

            Here, it's turned off by design as a security risk, which to some degree I can see and agree with, but now I'll have to annoy users and in some cases drive across town to perform a minor task I could have done with PS.

            Do they not have any other remote management system in place of any kind?
            Almost anything would be better than driving across town.

            We are using Manage Engine for remote -

            Does ME not have the ability to run commands on the machines? I know SC and MC both do.

            I wonder the same.

            1 Reply Last reply Reply Quote 0
            • gjacobseG
              gjacobse
              last edited by

              While it is likely I could be missing it,.. As of yet, I don't see any way to run commands like SC / MC. I've been looking over DesktopCentral and nothing stands out.

              DashrenderD stacksofplatesS 2 Replies Last reply Reply Quote 0
              • DashrenderD
                Dashrender @dafyre
                last edited by

                @dafyre said in WinRM: Security Question:

                @dashrender said in WinRM: Security Question:

                @gjacobse said in WinRM: Security Question:

                @dashrender said in WinRM: Security Question:

                @gjacobse said in WinRM: Security Question:

                Here, it's turned off by design as a security risk, which to some degree I can see and agree with, but now I'll have to annoy users and in some cases drive across town to perform a minor task I could have done with PS.

                Do they not have any other remote management system in place of any kind?
                Almost anything would be better than driving across town.

                We are using Manage Engine for remote -

                Does ME not have the ability to run commands on the machines? I know SC and MC both do.

                But don't SC and MC both require Agents? If you need to have an Agent installed then doesn't that make WinRM unnecessary?

                of course, no one said anything different.

                1 Reply Last reply Reply Quote 0
                • DashrenderD
                  Dashrender @gjacobse
                  last edited by

                  @gjacobse said in WinRM: Security Question:

                  While it is likely I could be missing it,.. As of yet, I don't see any way to run commands like SC / MC. I've been looking over DesktopCentral and nothing stands out.

                  Well that sucks... so yeah.. you'll have to interrupt the user, remote GUI - and run the command.
                  but at least you're not driving across town.

                  1 Reply Last reply Reply Quote 1
                  • ObsolesceO
                    Obsolesce
                    last edited by

                    If they can't keep their systems patched, then sure. But if that's the case it doesn't matter anyways. If it's not an issue to keep their devices patched properly, then it can be on. Additionally, you could configure the firewalls for devices to only allow connections from a bastion host.

                    1 Reply Last reply Reply Quote 0
                    • stacksofplatesS
                      stacksofplates @gjacobse
                      last edited by

                      @gjacobse said in WinRM: Security Question:

                      While it is likely I could be missing it,.. As of yet, I don't see any way to run commands like SC / MC. I've been looking over DesktopCentral and nothing stands out.

                      https://www.manageengine.com/products/free-windows-tools/free-remote-command-prompt-tool.html

                      1 Reply Last reply Reply Quote 1
                      • stacksofplatesS
                        stacksofplates
                        last edited by

                        https://www.manageengine.com/products/desktop-central/help/computer_configuration/executing_custom_scripts.html

                        gjacobseG 1 Reply Last reply Reply Quote 1
                        • gjacobseG
                          gjacobse @stacksofplates
                          last edited by

                          @stacksofplates said in WinRM: Security Question:

                          https://www.manageengine.com/products/desktop-central/help/computer_configuration/executing_custom_scripts.html

                          Thanks -
                          Guess it will have to do... sigh.

                          DashrenderD 1 Reply Last reply Reply Quote 0
                          • DashrenderD
                            Dashrender @gjacobse
                            last edited by

                            @gjacobse said in WinRM: Security Question:

                            @stacksofplates said in WinRM: Security Question:

                            https://www.manageengine.com/products/desktop-central/help/computer_configuration/executing_custom_scripts.html

                            Thanks -
                            Guess it will have to do... sigh.

                            I wonder if you can run powershell scripts by typing powershell first?

                            Is there a way to copy files to the computers with ME?

                            gjacobseG 1 Reply Last reply Reply Quote 0
                            • gjacobseG
                              gjacobse @Dashrender
                              last edited by

                              @dashrender said in WinRM: Security Question:

                              @gjacobse said in WinRM: Security Question:

                              @stacksofplates said in WinRM: Security Question:

                              https://www.manageengine.com/products/desktop-central/help/computer_configuration/executing_custom_scripts.html

                              Thanks -
                              Guess it will have to do... sigh.

                              I wonder if you can run powershell scripts by typing powershell first?

                              Is there a way to copy files to the computers with ME?

                              Seems like it is possible.

                              3c712099-6a8d-4e24-8fde-67a9e53cdbf3-image.png

                              1 Reply Last reply Reply Quote 0
                              • 1
                              • 2
                              • 1 / 2
                              • First post
                                Last post