psRemote Connection Fails Based on Source/Client Machine Config (I think)

Question

I am unable to create a New-psSession FROM a group of computers. Attempting to do so returns an error which includes:
“The WinRM client received an HTTP status code of 307 from the remote WS-Management service.”

I’ve worked with remoting errors/configs, always based on the configuration of the target computer. In this case the issue seems to be with the host initiating the call.

I have two groups of computers. Group A is older, Win2008. GroupB is Win2012R2. psRemoting is configured the same on all. All are subject to the same group policies.

From a machine in Group A, I can create a session to/on any computer in either group. This tells me psRemoting is configured on all.

I fail to create a remote session from ANY machine in Group B to any other machine, in either group.
Client Auth\CredSSP is enabled. The WinRM configurations on hosts is identical, included here:

Config
MaxEnvelopeSizekb = 500
MaxTimeoutms = 60000
MaxBatchItems = 32000
MaxProviderRequests = 4294967295
Client
NetworkDelayms = 5000
URLPrefix = wsman
AllowUnencrypted = false
Auth
Basic = true
Digest = true
Kerberos = true
Negotiate = true
Certificate = true
CredSSP = true
DefaultPorts
HTTP = 5985
HTTPS = 5986
TrustedHosts = *
Service
RootSDDL = O:NSG:BAD:P(A;;GA;;;BA)(A;;GR;;;IU)S:P(AU;FA;GA;;;WD)(AU;SA;GXGW;;;WD)
MaxConcurrentOperations = 4294967295
MaxConcurrentOperationsPerUser = 1500
EnumerationTimeoutms = 240000
MaxConnections = 300
MaxPacketRetrievalTimeSeconds = 120
AllowUnencrypted = true [Source=”GPO”]
Auth
Basic = false
Kerberos = true
Negotiate = true
Certificate = false
CredSSP = false
CbtHardeningLevel = Relaxed
DefaultPorts
HTTP = 5985
HTTPS = 5986
IPv4Filter = * [Source=”GPO”]
IPv6Filter = * [Source=”GPO”]
EnableCompatibilityHttpListener = false
EnableCompatibilityHttpsListener = false
CertificateThumbprint
AllowRemoteAccess = true [Source=”GPO”]
Winrs
AllowRemoteShellAccess = true
IdleTimeout = 900000 [Source=”GPO”]
MaxConcurrentUsers = 2147483647
MaxShellRunTime = 2147483647
MaxProcessesPerShell = 2147483647
MaxMemoryPerShellMB = 2147483647
MaxShellsPerUser = 2147483647
What am I missing?

Answer 1

Have you tried running TEST-WSMAN from those machines in Group B? You might have a problem with firewalls.