Security Group Administrators Lost Write(Write/FUll) over winrm default configuration( winrm configSDDL default )

Question

Due to mal-configuration, we lost the Write permission(Write/Full Control) over winrm default configuration.

Please advise how to restore/reclaim the Write/Full for Administrators group. - thanks

winrm configSDDL default

Answer 1

Hi,
This error may happens even if the account is a Local Administrator and the command line is run with administrator privileges.
UAC filtering for local accounts must be disabled by creating the following DWORD registry entry and setting its value to 1:
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] LocalAccountTokenFilterPolicy

Go to Manage local users of the computer. Check if the local "Administrator" account is disabled and has no password set. If so, enable it and set a password.

Also please check the Permission configuration in the link below
https://wiki.czechidm.com/tutorial/adm/configuration_-_winrm
Hope this helps and please help to accept as Answer if the response is useful.

Best Regards,
Carl

Answer 2

thank you for helping on this matter, Carl

while the pic is what I have got, put it short, the problem is not solved yet...

I have been trying to apply the recommendations from https://wiki.czechidm.com/tutorial/adm/configuration_-_winrm, but the blocker is that no configuration can be applied to winrm without the write permission(Write/Full Control), which the post is about...

Regards,
Percy

Answer 3

Did you ever resolve this? (if so how?)