The GPO setting Allow remote server management through WinRM was enabled and the IPv4 filter configured with an ip range (not "*")
Found out that:
- The IPv4 and IPv6 filters cannot contain a single ip address, it must contain a range. If not, you will see an event like the one below:
Log Name: System
Source: Microsoft-Windows-WinRM
Date: 4/7/2022 5:12:45 PM
Event ID: 10131
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: LitwareRootMS02.Litware.com
Description:
The IP Range 10.100.10.5 is invalid and it will be ignored.
Ranges are specified using the syntax IP1-IP2. Multiple ranges are separated using "," as delimiter.
Example IPv4 ranges: 2.0.0.1-2.0.0.20, 24.0.0.1-24.0.0.22
Example IPv6 ranges: 3FFE:FFFF:7654:FEDA:1245:BA98:0000:0000-3FFE:FFFF:7654:FEDA:1245:BA98:3210:4562
User Action
Correct the IP filter 10.100.10.5 using the syntax described above.
- The filter is supposed to contain the IP addresses the machine being managed should listen for requests on. And not the ip addresses of the management server(s) making the connection.