Share via

  • Article

How to Edit the Local Group Policy on the Target Computer

 

Updated: May 13, 2016

Applies To: System Center 2012 - Unified Installer

When you run System Center 2012 – Unified Installer, the target computer where the components are being installed must have WinRM configured to accept fresh credentials and the computers involved in the installation must be added to the Trusted Host list. Complete the following procedures on the target computer where you want to install a Service Manager 2012 component.

The following Group Policy settings must be applied to all target computers before you run the Unified Installer. Group Policy settings might take up to two hours to propagate to your target computers. Consider running the gpupdate /force command to speed up the process. For more information, see gpupdate in the Microsoft TechNet Library.

To start the Local Group Policy Editor

  1. Click Start, and then click Run.

  2. In the Open box, type mmc, and then click OK.

  3. On the File menu, click Add/Remove Snap-in.

  4. In the Add or Remove Snap-ins window, in the Available snap-ins list, click Group Policy Object, and then click Add.

  5. In the Select Group Policy Object Wizard, click Finish.

  6. In the Add or Remove Snap-ins window, click OK.

To edit the Group Policy settings

  1. In the Console1 window, in the Console Root, expand Local Computer Policy, expand Computer Configuration, expand Administrative Templates, expand Windows Components, expand Windows Remote Management (WinRM), and then click WinRM Service.

  2. In the Settings pane, double-click Allow automatic configuration of listeners.

  3. In the Allow configuration of listeners wizard, do the following:

    1. Click Enabled.

    2. In IPv4 filter, type *.

    3. In IPv6 filter, type *, and then click OK.

  4. In the Settings pane, double-click Allow CredSSP authentication.

  5. In the Allow CredSSP authentication wizard, click Enabled, and then click OK.

  6. In the Console1 window, in the Console Root, expand Local Computer Policy, expand Computer Configuration, expand Administrative Templates, expand Windows Components, and then click Windows Remote Shell.

  7. In the Settings pane, double-click Allow Remote Shell Access.

  8. In the Allow Remote Shell Access wizard, click Enabled.

  9. In the Settings pane, double-click Specify maximum amount of memory in MB per Shell.

  10. In the Specify maximum amount of memory in MB per Shell wizard, do the following:

    1. Click Enabled, and then click OK.

    2. Under Options, in MaxMemoryPerShellMB, type 2048, and then click OK.

  11. Close the Local Group Policy Editor.

See Also

Preparing a Target Computer for System Center 2012 Components