Could WinRM allow local logon but disallow remote logon?

user_10905282 0
Viewed 104

I am trying to setup a windows server, the WinRM service to allow access for a user only locally via invoke-command, but disallow access remotely...

I have tried editing the permissions with:

Set-PSSessionConfiguration Microsoft.PowerShell -ShowSecurityDescriptorUI

But this didn't help me really, I have also tried varies other ways, looked into this for a day but I cannot seem to find a way to make this to work.

So my question is, is there a way to allow a domain user to do Invoke-Command locally only, but disallow access to WinRM remotely ?

winrm powershell windows
1 Answers

The setting you're looking for is AccessMode.

Set-PSSessionConfiguration Microsoft.PowerShell -AccessMode Local

The options are Disabled, Local, Remote.

user_39050790
Related