---

Windows PowerShell
Copyright (C) Microsoft Corporation. All rights reserved.

Install the latest PowerShell for new features and improvements! https://aka.ms/PSWindows

PS C:\Users\Administrator> Enable-PSRemoting -Force -SkipNetworkProfileCheck
PS C:\Users\Administrator> Set-Service WinRM -StartupType Automatic
PS C:\Users\Administrator> Start-Service WinRM
PS C:\Users\Administrator>
PS C:\Users\Administrator> Set-Item -Path WSMan:\localhost\Service\Auth\Basic -Value $false
PS C:\Users\Administrator> Set-Item -Path WSMan:\localhost\Service\AllowUnencrypted -Value $false
PS C:\Users\Administrator>
PS C:\Users\Administrator> Set-ItemProperty `
>>   -Path "HKLM:\System\CurrentControlSet\Control\Terminal Server" `
>>   -Name "fDenyTSConnections" `
>>   -Value 0
PS C:\Users\Administrator>
PS C:\Users\Administrator> Enable-NetFirewallRule -DisplayGroup "Remote Desktop"
PS C:\Users\Administrator>
PS C:\Users\Administrator>
PS C:\Users\Administrator>
PS C:\Users\Administrator>
PS C:\Users\Administrator>
PS C:\Users\Administrator>
PS C:\Users\Administrator>
PS C:\Users\Administrator>
PS C:\Users\Administrator>
PS C:\Users\Administrator>
PS C:\Users\Administrator>
PS C:\Users\Administrator>
PS C:\Users\Administrator>
PS C:\Users\Administrator>
PS C:\Users\Administrator>
PS C:\Users\Administrator> hostname
WIN-FBBB7KE4F78
PS C:\Users\Administrator> Get-Service WinRM

Status   Name               DisplayName
------   ----               -----------
Running  WinRM              Windows Remote Management (WS-Manag...


PS C:\Users\Administrator> winrm enumerate winrm/config/listener
Listener
    Address = *
    Transport = HTTP
    Port = 5985
    Hostname
    Enabled = true
    URLPrefix = wsman
    CertificateThumbprint
    ListeningOn = 10.20.0.110, 127.0.0.1, ::1, fe80::8f0:dd2d:7d3:5cc2%3

PS C:\Users\Administrator> Get-NetFirewallRule -DisplayGroup "Remote Desktop" | Select-Object DisplayName, Enabled, Direction, Action

DisplayName                         Enabled Direction Action
-----------                         ------- --------- ------
Remote Desktop - Shadow (TCP-In)       True   Inbound  Allow
Remote Desktop - User Mode (TCP-In)    True   Inbound  Allow
Remote Desktop - User Mode (UDP-In)    True   Inbound  Allow


PS C:\Users\Administrator> Get-NetIPAddress | Where-Object {$_.AddressFamily -eq "IPv4"}


IPAddress         : 10.20.0.110
InterfaceIndex    : 3
InterfaceAlias    : Ethernet Instance 0
AddressFamily     : IPv4
Type              : Unicast
PrefixLength      : 24
PrefixOrigin      : Dhcp
SuffixOrigin      : Dhcp
AddressState      : Preferred
ValidLifetime     : 00:38:01
PreferredLifetime : 00:38:01
SkipAsSource      : False
PolicyStore       : ActiveStore

IPAddress         : 127.0.0.1
InterfaceIndex    : 1
InterfaceAlias    : Loopback Pseudo-Interface 1
AddressFamily     : IPv4
Type              : Unicast
PrefixLength      : 8
PrefixOrigin      : WellKnown
SuffixOrigin      : WellKnown
AddressState      : Preferred
ValidLifetime     :
PreferredLifetime :
SkipAsSource      : False
PolicyStore       : ActiveStore



PS C:\Users\Administrator> Get-DnsClientServerAddress

InterfaceAlias               Interface Address ServerAddresses
                             Index     Family
--------------               --------- ------- ---------------
Ethernet Instance 0                  3 IPv4    {10.20.0.1}
Ethernet Instance 0                  3 IPv6    {}
Loopback Pseudo-Interface 1          1 IPv4    {}
Loopback Pseudo-Interface 1          1 IPv6    {fec0:0:0:ffff::1, fec0:0:0:ffff::2, fec0:0:0:ffff::3}


PS C:\Users\Administrator> $hostname = "windows-ad-01"
PS C:\Users\Administrator>
PS C:\Users\Administrator> $certificate = New-SelfSignedCertificate `
>>   -DnsName $env:COMPUTERNAME, $hostname `
>>   -CertStoreLocation Cert:\LocalMachine\My
PS C:\Users\Administrator>
PS C:\Users\Administrator> Get-ChildItem WSMan:\localhost\Listener |
>>   Where-Object {
>>     $_.Keys -contains "Transport=HTTPS" -or
>>     $_.Keys -contains "Transport=HTTP"
>>   } |
>>   Remove-Item -Recurse -Force
PS C:\Users\Administrator>
PS C:\Users\Administrator> New-Item `
>>   -Path WSMan:\localhost\Listener `
>>   -Transport HTTPS `
>>   -Address * `
>>   -CertificateThumbPrint $certificate.Thumbprint `
>>   -Force


   WSManConfig: Microsoft.WSMan.Management\WSMan::localhost\Listener

Type            Keys                                Name
----            ----                                ----
Container       {Transport=HTTPS, Address=*}        Listener_1305953032


PS C:\Users\Administrator>
PS C:\Users\Administrator> New-NetFirewallRule `
>>   -DisplayName "WinRM HTTPS" `
>>   -Direction Inbound `
>>   -Protocol TCP `
>>   -LocalPort 5986 `
>>   -Action Allow `
>>   -Profile Any


Name                          : {5c1251cf-4e2a-40c4-9f2d-93d39fd4e801}
DisplayName                   : WinRM HTTPS
Description                   :
DisplayGroup                  :
Group                         :
Enabled                       : True
Profile                       : Any
Platform                      : {}
Direction                     : Inbound
Action                        : Allow
EdgeTraversalPolicy           : Block
LooseSourceMapping            : False
LocalOnlyMapping              : False
Owner                         :
PrimaryStatus                 : OK
Status                        : The rule was parsed successfully from the store. (65536)
EnforcementStatus             : NotApplicable
PolicyStoreSource             : PersistentStore
PolicyStoreSourceType         : Local
RemoteDynamicKeywordAddresses : {}
PolicyAppId                   :
PackageFamilyName             :



PS C:\Users\Administrator>