Enabling WinRM service using Group Policy

In order to remote manage your remote computers using Windows Powershell, there is a requirement to enable the WinRM service on each target.

This may be enabled by browsing to the below group policy setting path and enabling ‘Allow automatic configuration of listeners:

Computer Configuration/Policies/Administrative Templates/Windows Components/Windows Remote Management (WinRM)/WinRM Service

You may restrict the clients that may connect to the listener by filtering IPv4 and IPv6  addresses, use a wildcard (“*”) to allow all IP addresses or a null value would listen on no IP addresses.

If you have Windows Firewall enabled, you will also need to enable inbound connections for the WinRM Service by enabling TCP service port 5985.


Leave a comment