On this page

Show all

Help Center/ Migration Center/ MgC Agent Usage Guide/ FAQs/ How Do I Configure WinRM and Troubleshoot WinRM Connection Problems?

How Do I Configure WinRM and Troubleshoot WinRM Connection Problems?

Updated on 2025-02-17 GMT+08:00

View PDF

This section describes how to configure WinRM on a Windows source server and the solutions to connection problems.

Log in to the server as an administrator (for example, an administrator account or a local user account in the administrators group).
Run PowerShell as administrator.

Run the following command on PowerShell to start WinRM:

winrm quickconfig
Enable-PSRemoting
Set-ExecutionPolicy -ExecutionPolicy RemoteSigned

Log in to the server where the MgC Agent (formerly Edge) is installed as an administrator and run PowerShell as administrator. Perform steps 5 to 7 on the server with the MgC Agent installed.
Add the source server to the trusted host list.
Run the following command on PowerShell to add the source server to the trusted host list:
```
winrm set winrm/config/client '@{TrustedHosts="*"}'
```
For security purposes, you are advised to use hostname or IP address of the source server to replace the asterisk (*) in the TrustedHosts value. If it is not replaced, any host is trusted.
Remotely connect to the source server.
Run the following command to test the connection to the source server. Replace Login account and Source server IP address with the actual login account and IP address of the source server.
```
Enter-PSSession -Credential Login account -ComputerName Source server IP address
```
In the dialog box that is displayed, enter the username and password for logging in to source server and click OK.
- If the connection is successful, you can run any command to test the connectivity.
- If the connection fails, rectify the fault by referring to WinRM Connection Failure Troubleshooting.

If the remote connection fails, check:

Port settings: Use telnet to check whether port 5985 on the source server can be accessed. If the port cannot be accessed, check the settings of the firewall or security protection software on the source server to ensure that port 5985 is open.
```
telnet ip port
```
Network settings: Run the following command to check whether the network mode is set to Classic.
```
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" /v forceguest
```
- If the value of forceguest is REG_DWORD 0x0, the network mode is Classic
- If the value of forceguest is not REG_DWORD 0x0, run the following command to change it:
```
reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa"  /v forceguest /t reg_dword /d 0x0
```
Username and password: Ensure that the username and password entered in the connection command are correct.