Monthly Archives: May 2015

Configure PowerShell remoting access remotely

Only administrators can connect through PowerShell remoting (WinRM) with the default configuration, and if you are running a version older than Windows 8/Server 2012 you wont have the “Remote Management Users” local group to add non-admins to if you want to give them access to PowerShell remoting (WinRM).

You can configure the access list of the endpoint(s) using “Set-PSSessionConfiguration -Name Microsoft.PowerShell -ShowSecurityDescriptorUI”, but it only runs locally and if you don’t want to build the SDDLs yourself the only alternative is to use the UI enabled by the switch in that example.

So I put together a function to enable you to simply pass an account (user or group) by name, and if you want to run it remotely, a computer name. It is really simple to use. It looks like this in action:
PoShEndpointFunction

The code for this function as been uploaded here.