Windows Remote Management (WinRM) is a powerful tool that allows administrators to remotely manage and execute commands on Windows machines. This article will guide you through the process of configuring WinRM using command-line tools, specifically focusing on the winrm set command.

Examples:

1. Enable WinRM Service: To start using WinRM, you first need to enable the service on your Windows machine. This can be done using the winrm quickconfig command, which sets up the service and configures a listener.

   winrm quickconfig

   This command performs the following actions:

   • Starts the WinRM service.
   • Sets the service to start automatically.
   • Creates a listener to accept requests.
   • Configures a firewall exception for the listener.

2. Configure WinRM Settings: You can use the winrm set command to configure various settings for WinRM. For example, to set the maximum number of concurrent operations per user, you can use:

   winrm set winrm/config/winrs @{MaxShellsPerUser="10"}

   This command configures the WinRM service to allow a maximum of 10 concurrent shells per user.

3. Set Up HTTPS Listener: For secure communication, it's recommended to use HTTPS. You can configure an HTTPS listener using the following commands:

   winrm create winrm/config/Listener?Address=*+Transport=HTTPS @{Hostname="yourhostname"; CertificateThumbprint="yourcertificatethumbprint"}

   Replace yourhostname with your machine's hostname and yourcertificatethumbprint with the thumbprint of your SSL certificate.

4. Allow Unencrypted Traffic (Optional): If you need to allow unencrypted traffic for testing purposes, you can configure WinRM with:

   winrm set winrm/config/service @{AllowUnencrypted="true"}

   Note: Allowing unencrypted traffic is not recommended for production environments due to security concerns.

5. Configure Trusted Hosts: To allow WinRM connections from specific hosts, you can set trusted hosts using:

   winrm set winrm/config/client @{TrustedHosts="host1,host2"}

   Replace host1,host2 with the actual hostnames or IP addresses of the machines you want to trust.