Windows PowerShell Remoting

What command is used to enable PowerShell remoting?

Enable-PSRemoting

What windows service does powershell remoting use?

WinRM

What is the kerberos second hop problem?

Kerberos won’t pass privileges over a second hop

What command do you use to start a PS remote session? What about for VM’s?

Enter-PSSesstion -computername/VMName

What command can you use to send commands to a remote machine without having to start a PS remote session?

Invoke-Command -computername -scriptblock

What command do you use to create a persistent session?

$variable = New-PSSession

What is one-to-many?

Using PS remoting to send commands to multiple systems

What type of account should you use for PS remoting?

An admin account

What are the 5 workarounds to the kerberos second hop problem?

CredSSP, Kerberos Delegation, JEA, RunAsCredential, Invoke-Command

What is CredSSP?

Credential security support provider caches credentials on a remote server to be used on a 2nd server, not super secure

What is Kerberos delegation?

More secure than CredSSP but complicated to set up

What is JEA?

Just Enough Administration can be used to define user privileges for PS remoting

Where does PS remoting have to be configured?

On the remote machine

What command do you use to exit a PS remote session?

Exit-PSSession

What command do you use to see open PS remote sessions?

Get-PSSession

Where must CredSSP be configured?

Client, intermediary server

What 3 steps are part of the JEA process?

Create a role capability file, create a session config file, then the register session config file

What command do you use to create a new PS session configuration file?

New-PSSessionConfigurationFile

What are the 3 kerberos delegation types?

Unconstrained, Constrained, and resource-based

What command do you use to create a new PS role capability file?

New-PSCapabilityFile