How Do I Configure WinRM and Troubleshoot WinRM Connection Problems?

Configuring WinRM

1. Log in to the server as an administrator (for example, an administrator account or a local user account in the administrators group).
2. Run PowerShell as administrator.
3. Run the following command on PowerShell to start WinRM:

   winrm quickconfig
   Enable-PSRemoting
   Set-ExecutionPolicy -ExecutionPolicy RemoteSigned

4. Log in to the server where Edge is installed as an administrator and run PowerShell as administrator. Perform steps 5 to 7 on the server with Edge installed.
5. Add the source server to the trusted host list.
   Run the following command on PowerShell to add the source server to the trusted host list:

   winrm set winrm/config/client '@{TrustedHosts="*"}'

   For security purposes, you are advised to use hostname or IP address of the source server to replace the asterisk (*) in the TrustedHosts value. If it is not replaced, any host is trusted.

6. Remotely connect to the source server.
   Run the following command to test the connection to the source server. Replace Login account and Source server IP address with the actual login account and IP address of the source server.

   Enter-PSSession -Credential Login account -ComputerName Source server IP address

7. In the dialog box that is displayed, enter the username and password for logging in to source server and click OK.
   • If the connection is successful, you can run any command to test the connectivity.
   • If the connection fails, rectify the fault by referring to WinRM Connection Failure Troubleshooting.

WinRM Connection Failure Troubleshooting

If the remote connection fails, check:

• Port settings: Use telnet to check whether port 5985 on the source server can be accessed. If the port cannot be accessed, check the settings of the firewall or security protection software on the source server to ensure that port 5985 is open.

  telnet ip port

• Network settings: Run the following command to check whether the network mode is set to Classic.

  reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" /v forceguest

  • If the value of forceguest is REG_DWORD 0x0, the network mode is Classic
  • If the value of forceguest is not REG_DWORD 0x0, run the following command to change it:

    reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa"  /v forceguest /t reg_dword /d 0x0

• Username and password: Ensure that the username and password entered in the connection command are correct.

The preceding steps can rectify common connection problems. If the problem persists, contact technical support.