Configuring WinRM for HTTPS

Question

Hi,
I need to configure WinRM port as Listener.

UPD:

Basing on instruction from article in comments I configured it to Address=*.

This option is not secure.
I need to restrict the number of allowed IPs on Address=<IP>

Which command can do it?

Answer 1

Hello @Mariia Tiurina

Found from here:

1. Firewall; enable a rule that only allows inbound WinRM connections from the specified subnet.
2. Following, your initial line of thought, use the "Service" side of WSman instead of the "Client" side, i.e.
   Text
   Set-Item -Path WSMan:\localhost\Service\ -Name IPv4Filter -Value 10.10.10.1-10.10.10.254
3. Use a Group Policy to configure the same setting Compter \ Policies \ Administrative Templates \ Windows Components \ Windows Remote Management \ WinRM Service \ Allow remote server management through WinRM: Enabled & Configure IPv4 Filter

Other reference article:Installation and configuration for Windows Remote Management

Best Regards
Karlie

----------

If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Hi,
Following command for your reference:
https://stackoverflow.com/questions/17281224/configure-and-listen-successfully-using-winrm-in-powershell

Best Regards,

Answer 3

Hello @Mariia Tiurina

Found from here:

1. Firewall; enable a rule that only allows inbound WinRM connections from the specified subnet.
2. Following, your initial line of thought, use the "Service" side of WSman instead of the "Client" side, i.e.
   Text
   Set-Item -Path WSMan:\localhost\Service\ -Name IPv4Filter -Value 10.10.10.1-10.10.10.254
3. Use a Group Policy to configure the same setting Compter \ Policies \ Administrative Templates \ Windows Components \ Windows Remote Management \ WinRM Service \ Allow remote server management through WinRM: Enabled & Configure IPv4 Filter

Other reference article:Installation and configuration for Windows Remote Management

Best Regards
Karlie

----------

If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.