Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision 		Previous revision
Next revision Both sides next revision
tutorial:adm:configuration_-_winrm [2019/10/08 13:47]
fiserp [Common issues] 		tutorial:adm:configuration_-_winrm [2021/05/24 08:09]
kucerar spell fixes
Line 57: Line 57:
  
 ===== Permission configuration ===== ===== Permission configuration =====
-If you want to use user which is not admin then we need a more configuration. If you want to use admin user you should ready to go even without it.+If you want to use user which is not admin then we need to do a more configuration. If you want to use admin user you should be ready to go even without it.
  
 Now we need to set the right permissions. It's tested against NTLM, Kerberos and CredSSP auth Now we need to set the right permissions. It's tested against NTLM, Kerberos and CredSSP auth
Line 68: Line 68:
   * Computer Management -> Services and Application -> right click WMI Control -> Properties   * Computer Management -> Services and Application -> right click WMI Control -> Properties
   * In new dialog window -> tab Security -> Root -> CIMV2 and click button Security   * In new dialog window -> tab Security -> Root -> CIMV2 and click button Security
-  * Next dialog window will appear - you need to add group here+  * Next dialog window will appear - you need to add group here (WinRMRemoteWMIUsers__ or Remote Management Users)
   * You need to select these options in the checkboxes - Execute Methods, Enable Account and Remote Enable   * You need to select these options in the checkboxes - Execute Methods, Enable Account and Remote Enable
   * Click on Advanced - select and edit group -> Set "Applies to" This namespace and subnamespaces   * Click on Advanced - select and edit group -> Set "Applies to" This namespace and subnamespaces
Line 78: Line 78:
   * <code>winrm configSDDL default</code>   * <code>winrm configSDDL default</code>
 {{:tutorial:adm:winrm_sddl.png?nolink&400|}} {{:tutorial:adm:winrm_sddl.png?nolink&400|}}
-  * Add group and give it Full Control+  * Add group and give it Full Control (Use WinRMRemoteWMIUsers__ or Remote Management Users, depends on your environment)
   * Confirm changes   * Confirm changes
  
Line 167: Line 167:
 import os import os
 # there, you can explicitly set path to your CA chain # there, you can explicitly set path to your CA chain
 +# DO NOT put there server's certificate itself
 os.environ["REQUESTS_CA_BUNDLE"] = "/path/to/crt/chain.pem" os.environ["REQUESTS_CA_BUNDLE"] = "/path/to/crt/chain.pem"
  
  • by erbenr