So I click on the GPO and link it by drag & drop to the OU Workstations. In my case all client computers are in the OU Workstations. Link the GPO to the OU of your Client Computers If you want to restrict access to a single computer then I recommend to provide the IP address of that remote host(s).Ĭlick OK. If you enter * then all computers in your domain are permitted to establish a connection via WinRM. Now enter the values for the IPv4 and IPv6 filters. Open Allow remote server management through WinRM. Navigate toĬomputer Configuration – Policies – Administrative Templates – Windows Components – Windows Remote Management (WinRM) – WinRM Service Configuring the WinRM ListenerĮdit your newly created GPO for the last time. Next we will configure the WinRM listener. You have to configure Startup, Service name and Service action as below:Ĭlick OK. Right click on Services and choose New – Service. Right click on your GPO and select Edit again.Ĭomputer Configuration – Preferences – Control Panel Settings – Services Let’s move on configuring the WinRM service. Make sure Allow the connection is selected. Next, uncheck the predefined rule for the public networks. Select Predefined and choose Windows Remote Management from the drop down menu. Right click on Inbound Rules and select New Rule … Next, right-click on your newly created GPO and select Edit.Ĭomputer Configuration – Windows Settings – Security Settings – Windows Firewall with Advanced Security – Inbound Rules. On a domain controller of your domain open gpmc.msc and create a new GPO (Group Policy Object).Įnter a name for your new GPO and hit OK. We have to configure three settings for our client computers. Unlike Windows Server operating systems, Windows client operating systems are missing the following settings: More about this tool here: Active Directory Domain Services Section (Version 1.1) If you want to perform some magic stuff like restarting all client computers, enabling Remote Desktop remotely, query logged on users or simply connecting to your client computers with PowerShell then you have to enable WinRM on your clients.Īt this point I would like to mention that my Active Directory Services Tool only works flawlessly with WinRM enabled clients. In this blog post I will show you how to enable WinRM on your client computers by using Group Policies. WinRM is enabled by default on all Windows Server operating systems (since Windows Server 2012 and above), but disabled on all client operating systems like Windows 10, Windows 8 and Windows 7. Windows Remote Management is a powerful feature to administer your Windows systems remotely.

Best email box for windows 10 for 2018