1

Hello

I have a problem with creating PS session to my Domain Controllers.

It works fine between other servers and clients, and if it’s not, I know how to enable it.

It looks like its enabled on DCs but I cannot make the connection.

I get:

Enter-PSSession : Connecting to remote server server.domain.com failed with the following error message : WinRM cannot complete the operation. Verify that the specified computer
name is valid, that the computer is
accessible over the network, and that a firewall exception for the WinRM service is enabled and allows access from this computer. By default, the WinRM firewall exception for public profiles limits access to remote computers
within the same local subnet. For more information, see the about_Remote_Troubleshooting Help topic.
At line:1 char:1

  • Enter-PSSession ‘server.domain.com’ -Credential:'domain. …
  • CategoryInfo : InvalidArgument: (server.domain.com:String) [Enter-PSSession], PSRemotingTransportException
  • FullyQualifiedErrorId : CreateRemoteRunspaceFailed

Any idea why its domain controller specific and how to fix it ?

Thanks

4 Spice ups
2

I think your answer may actually be within the error. Might have a firewall issue. Could be the local Windows firewall. This article is for Exchange, but might help get you in the right direction. Or, maybe Windows Remote Management is not started?

3

Can you RDP onto your DCs? Have you permission to do this?

4

So same as the others, permissions because I’m assuming you’ve spelled everything right. DC’s are sometimes blocked from remote the connections with group policy as a security measure

5

One issue could be that Windows NLA decides the NIC is not domain but public profile - so applies the (sensibly!) more strict public firewall rules.

One thing to do would be to turn OFF the firewall on the Remote server and re-attempt creating the remote session. If that too fails, then you do not have a firewall issue.

6

Remember, if a domain GPO doesn’t have a particular setting (it’s neither enabled nor disabled) and the Local GPO does, the net effect is the local setting will be applied.