Setup
Mid Server Configuration
Much of this is set by default, but here's the settings that work.
Windows Configuration needed
...
One thing that's a bit confusing here is that we see WMI being invoked. This isn't actually remote WMI, which we'll get into below.
High Level Process
Wireshark
Shows WinRM port 5985 and only 5985 being used.
...
| View file | ||||
|---|---|---|---|---|
|
Without local admin
Work in progress...