question

PERCYSHI-4552 avatar image
0 Votes"
PERCYSHI-4552 asked StefanCoussens-7237 answered

Security Group Administrators Lost Write(Write/FUll) over winrm default configuration( winrm configSDDL default )

Due to mal-configuration, we lost the Write permission(Write/Full Control) over winrm default configuration.

Please advise how to restore/reclaim the Write/Full for Administrators group. - thanks



winrm configSDDL default


40241-image.png


windows-server-management
image.png (382.8 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

CarlFan-MSFT avatar image
0 Votes"
CarlFan-MSFT answered

Hi,
This error may happens even if the account is a Local Administrator and the command line is run with administrator privileges.
UAC filtering for local accounts must be disabled by creating the following DWORD registry entry and setting its value to 1:
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] LocalAccountTokenFilterPolicy

Go to Manage local users of the computer. Check if the local "Administrator" account is disabled and has no password set. If so, enable it and set a password.

Also please check the Permission configuration in the link below
https://wiki.czechidm.com/tutorial/adm/configuration_-_winrm
Hope this helps and please help to accept as Answer if the response is useful.

Best Regards,
Carl

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

PERCYSHI-4552 avatar image
0 Votes"
PERCYSHI-4552 answered

thank you for helping on this matter, Carl

while the pic is what I have got, put it short, the problem is not solved yet...

I have been trying to apply the recommendations from https://wiki.czechidm.com/tutorial/adm/configuration_-_winrm, but the blocker is that no configuration can be applied to winrm without the write permission(Write/Full Control), which the post is about...


40482-image.png




Regards,
Percy


image.png (1.1 MiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

StefanCoussens-7237 avatar image
0 Votes"
StefanCoussens-7237 answered

Did you ever resolve this? (if so how?)

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.