WinRM vs. WMI Polling comparison

What are the benefits when configuring the WinRM filtering as opposed to the existing WMI polling that is already working without making major changes in the AD Domain [Installation and configuration for Windows Remote Management - Win32 apps | Microsoft Learn] ?

Find more posts tagged with

WinRM

WMI

Polling

Accepted answers

bmrad

We have this article the goes into some of the advantages: https://documentation.solarwinds.com/en/success_center/orionplatform/content/core-winrm-support.htm

All comments

bmrad

We have this article the goes into some of the advantages: https://documentation.solarwinds.com/en/success_center/orionplatform/content/core-winrm-support.htm

itengineer

Thanks @bmrad ,
Yes, it does have multiple features and benefits of WinRM over WMI.

However, to successfully and reliably configure a machine to use WinRM (Windows Remote Management), we will all need to enable the service, set up listeners, and configure security settings like below:

Is there any automated way to enable it on 3000+ Windows Servers?

hpstech

Anyone have experience deploying a GPO similar to this to automate WinRM?

[Computer Configuration/Policies/Administrative Templates/Windows Components/Windows Remote Management (WinRM)/WinRM Service]
Allow remote server management through WinRM" = Enabled
Options: "IPv4 filter: * IPv6 filter: {none}
Allow Basic Authentication" = Disabled
Allow unencrypted traffic" = Disabled
Disallow WinRM from storing RunAs credentials" = Enabled
Disallow Kerberos authentication" = Disabled
Disallow Negotiate authentication" = Enabled
Turn On Compatibility HTTP Listener" = Disabled
Turn On Compatibility HTTPS Listener" = Disabled
[Computer Configuration/Policies/Administrative Templates/Windows Components/Windows Remote Management (WinRM)/WinRM Client]
Allow Basic Authentication" = Disabled
Allow unencrypted traffic" = Disabled
Disallow Kerberos authentication" = Disabled
Disallow Negotiate authentication" = Enabled
Disallow Digest authentication" = Enabled
6. Set "GPO Status" to "User configuration settings disabled".
7. Security Filtering:
- Add "Authenticated Users" and using the delegation tab, assign the "Apply Group Policy" permission.

itengineer

@hpstech ,
Thank you for sharing, not really, but that is a good start.