Secrets of PowerShell Remoting
Remoting Basics
- What is Remoting?
- Examining Remoting Architecture
- Enabling Remoting
- Test Environment
- Enabling Remoting
- Core Remoting Tasks
- Remoting Returns Deserialized Data
- Enter-PSSession vs. Invoke-Command
Accessing Remote Computers
- Setting up an HTTPS Listener
- Certificate Authentication
- Modifying the TrustedHosts List
- Connecting Across Domains
- Administrators from Other Domains
- The Second Hop
Working with Endpoints (aka Session Configurations)
- Connecting to a Different Endpoint
- Creating a Custom Endpoint
- Security Precautions with Custom Endpoints
Diagnostics and Troubleshooting
- Diagnostics Examples
- Standard Troubleshooting Methodology
- Summary
Session Management
- Ad-Hoc vs. Persistent Sessions
- Disconnecting and Reconnecting Sessions
- Session Options
PowerShell, Remoting, and Security
- Neither PowerShell nor Remoting are a âBack Doorâ for Malware
- PowerShell Remoting is Not Optional
- Remoting Does Not Transmit or Store Credentials
- Remoting Uses Encryption
- Remoting is Security-Transparent
- Remoting is Lower Overhead
- Remoting Uses Mutual Authentication
- Summary
Configuring Remoting via GPO
- GPO Caveats
- Allowing Automatic Configuration of WinRM Listeners
- Setting the WinRM Service to Start Automatically
- Creating a Windows Firewall Exception
- Give it a Try!
- What You Cant Do with a GPO
