# Problems enabling PSRemoting on domain joined Windows 2008 R2 server **URL:** \ **Category:** PowerShell Help\ **Created:** [October 16, 2017, 2:41pm UTC](https://forums.powershell.org/t/problems-enabling-psremoting-on-domain-joined-windows-2008-r2-server/9533 "2017-10-16T14:41:08Z")\ **Posts on this page:** 12\ **Page:** 1
**Author:** ![ronnie-jorgensen](https://avatars.discourse-cdn.com/v4/letter/r/97f17d/32.png) [@ronnie-jorgensen](https://forums.powershell.org/u/ronnie-jorgensen)\ **Post date:** [October 16, 2017, 2:41pm UTC](https://forums.powershell.org/t/problems-enabling-psremoting-on-domain-joined-windows-2008-r2-server/9533/1 "2017-10-16T14:41:08Z")
Hi all, I have followed this guide to enable PS Remoting: [How to enable PowerShell Remoting via Group Policy | TechRepublic](http://www.techrepublic.com/article/how-to-enable-powershell-remoting-via-group-policy/) I have some domain joined Windows Server 2008 R2 servers that has a few problems and I cannot work out what it is. You can see below the output running winrm get winrm/config directly on one of the servers. I can confirm that there is no third party AV installed on this server and Windows firewall is turned off. Service is not disabled. PS C:\Users\rj\_admin\> **winrm get winrm/config** WSManFault Message = WinRM cannot process the request. The following error occured while using Negotiate authentication: An unknown security error occurred. Possible causes are: -The user name or password specified are invalid. -Kerberos is used when no authentication method and no user name are specified. -Kerberos accepts domain user names, but not local user names. -The Service Principal Name (SPN) for the remote computer name and port does not exist. -The client and remote computers are in different domains and there is no trust between the two domains. After checking for the above issues, try the following: -Check the Event Viewer for events related to authentication. -Change the authentication method; add the destination computer to the WinRM TrustedHosts configuration setting or use HTTPS transport. Note that computers in the TrustedHosts list might not be authenticated. -For more information about WinRM configuration, run the following command: winrm help config. Error number: -2144108387 0x8033809D An unknown security error occurred. **Below is from when i run a command from my domain controller that sit on the same virtual platform.** PS C:\Windows\system32\> Invoke-Command -ComputerName SERVER1 -ScriptBlock { $PSVersionTable.PSVersion } [SERVER1] Connecting to remote server SERVER1 failed with the following error message : WinRM cannot process the request. The following error with errorcode 0x80090322 occurred while using Kerberos authentication: An unknown security error occurred. Possible causes are: -The user name or password specified are invalid. -Kerberos is used when no authentication method and no user name are specified. -Kerberos accepts domain user names, but not local user names. -The Service Principal Name (SPN) for the remote computer name and port does not exist. -The client and remote computers are in different domains and there is no trust between the two domains. After checking for the above issues, try the following: -Check the Event Viewer for events related to authentication. -Change the authentication method; add the destination computer to the WinRM TrustedHosts configuration setting or use HTTPS transport. Note that computers in the TrustedHosts list might not be authenticated. -For more information about WinRM configuration, run the following command: winrm help config. For more information, see the about\_Remote\_Troubleshooting Help topic. + CategoryInfo : OpenError: (SERVER1:String) , PSRemotingTransportException + FullyQualifiedErrorId : -2144108387,PSSessionStateBroken ---
**Author:** ![donj](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.powershell.org/donj/32/137_2.png) [@donj](https://forums.powershell.org/u/donj)\ **Post date:** [October 16, 2017, 2:42pm UTC](https://forums.powershell.org/t/problems-enabling-psremoting-on-domain-joined-windows-2008-r2-server/9533/2 "2017-10-16T14:42:19Z")
WinRM and Remoting are related, but they’re not the same thing. Did you run Enable-PSRemoting on the machine(s) you’re trying to connect to? It’s possible to enable WinRM but NOT enable Remoting. ---
**Author:** ![donj](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.powershell.org/donj/32/137_2.png) [@donj](https://forums.powershell.org/u/donj)\ **Post date:** [October 16, 2017, 2:43pm UTC](https://forums.powershell.org/t/problems-enabling-psremoting-on-domain-joined-windows-2008-r2-server/9533/3 "2017-10-16T14:43:29Z")
Oh, sorry - you’re attempting to do this via GPO. OK. First, check out our free “Secrets of PowerShell Remoting,” and just confirm you did everything in there. Nothing against TechRepublic, but that’s the Remoting bible. Then in PowerShell, see if you have a WSMAN: drive, and if you can run Get-PSSessionConfiguration. ---
**Author:** ![ronnie-jorgensen](https://avatars.discourse-cdn.com/v4/letter/r/97f17d/32.png) [@ronnie-jorgensen](https://forums.powershell.org/u/ronnie-jorgensen)\ **Post date:** [October 16, 2017, 2:45pm UTC](https://forums.powershell.org/t/problems-enabling-psremoting-on-domain-joined-windows-2008-r2-server/9533/4 "2017-10-16T14:45:44Z")
Oh also to say some of these servers still run PS 2.0 **Output from Enable-PSRemoting** PS C:\Users\rj\_admin\> Enable-PSRemoting WinRM Quick Configuration Running command “Set-WSManQuickConfig” to enable this machine for remote management through WinRM service. This includes: 1. Starting or restarting (if already started) the WinRM service 2. Setting the WinRM service type to auto start 3. Creating a listener to accept requests on any IP address 4. Enabling firewall exception for WS-Management traffic (for http only). Do you want to continue? [Y] Yes [A] Yes to All [N] No [L] No to All [S] Suspend [?] Help (default is “Y”): y WinRM already is set up to receive requests on this machine. Set-WSManQuickConfig : WinRM cannot process the request. The following error occured while using Negotiate authentication: An unknown security error occurred. Possible causes are: -The user name or password specified are invalid. -Kerberos is used when no authentication method and no user name are specified. -Kerberos accepts domain user names, but not local user names. -The Service Principal Name (SPN) for the remote computer name and port does not exist. -The client and remote computers are in different domains and there is no trust between the two domains. After checking for the above issues, try the following: -Check the Event Viewer for events related to authentication. -Change the authentication method; add the destination computer to the WinRM TrustedHosts configuration setting or use HTTPS transport. Note that computers in the TrustedHosts list might not be authenticated. -For more information about WinRM configuration, run the following command: winrm help config. At line:50 char:33 - ``` Set-WSManQuickConfig <<< ``` ---
**Author:** ![donj](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.powershell.org/donj/32/137_2.png) [@donj](https://forums.powershell.org/u/donj)\ **Post date:** [October 16, 2017, 2:46pm UTC](https://forums.powershell.org/t/problems-enabling-psremoting-on-domain-joined-windows-2008-r2-server/9533/5 "2017-10-16T14:46:28Z")
Are you certain you ran that in an elevated shell (“as Administrator”)? ---
**Author:** ![ronnie-jorgensen](https://avatars.discourse-cdn.com/v4/letter/r/97f17d/32.png) [@ronnie-jorgensen](https://forums.powershell.org/u/ronnie-jorgensen)\ **Post date:** [October 16, 2017, 2:47pm UTC](https://forums.powershell.org/t/problems-enabling-psremoting-on-domain-joined-windows-2008-r2-server/9533/6 "2017-10-16T14:47:33Z")
PS C:\Users\rj\_admin\> cd wsman: PS WSMan:> ls WSManConfig: ComputerName Type * * * localhost Container PS WSMan:> PS WSMan:> Get-PSSessionConfiguration Get-ChildItem : WinRM cannot process the request. The following error occured while using Negotiate authentication: Anunknown security error occurred. Possible causes are: -The user name or password specified are invalid. -Kerberos is used when no authentication method and no user name are specified. -Kerberos accepts domain user names, but not local user names. -The Service Principal Name (SPN) for the remote computer name and port does not exist. -The client and remote computers are in different domains and there is no trust between the two domains. After checking for the above issues, try the following: -Check the Event Viewer for events related to authentication. -Change the authentication method; add the destination computer to the WinRM TrustedHosts configuration setting or use HTTPS transport. Note that computers in the TrustedHosts list might not be authenticated. -For more information about WinRM configuration, run the following command: winrm help config. At line:31 char:6 - dir \<\<\< ---
**Author:** ![ronnie-jorgensen](https://avatars.discourse-cdn.com/v4/letter/r/97f17d/32.png) [@ronnie-jorgensen](https://forums.powershell.org/u/ronnie-jorgensen)\ **Post date:** [October 16, 2017, 2:49pm UTC](https://forums.powershell.org/t/problems-enabling-psremoting-on-domain-joined-windows-2008-r2-server/9533/7 "2017-10-16T14:49:04Z")
Yes i am, i see Administrator: Windows PowerShell at the top ---
**Author:** ![donj](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.powershell.org/donj/32/137_2.png) [@donj](https://forums.powershell.org/u/donj)\ **Post date:** [October 16, 2017, 2:57pm UTC](https://forums.powershell.org/t/problems-enabling-psremoting-on-domain-joined-windows-2008-r2-server/9533/8 "2017-10-16T14:57:29Z")
Then, it unfortunately seems broken. If Set-WsManQuickConfig breaks, then something at the authentication level is borked. I’ve not run into that before, so I’m not certain how to fix it. ---
**Author:** ![ronnie-jorgensen](https://avatars.discourse-cdn.com/v4/letter/r/97f17d/32.png) [@ronnie-jorgensen](https://forums.powershell.org/u/ronnie-jorgensen)\ **Post date:** [October 16, 2017, 3:01pm UTC](https://forums.powershell.org/t/problems-enabling-psremoting-on-domain-joined-windows-2008-r2-server/9533/9 "2017-10-16T15:01:04Z")
Ok, will try a few more things. thank you though for the assistance. BR Ronnie ---
**Author:** ![ronnie-jorgensen](https://avatars.discourse-cdn.com/v4/letter/r/97f17d/32.png) [@ronnie-jorgensen](https://forums.powershell.org/u/ronnie-jorgensen)\ **Post date:** [October 16, 2017, 3:38pm UTC](https://forums.powershell.org/t/problems-enabling-psremoting-on-domain-joined-windows-2008-r2-server/9533/10 "2017-10-16T15:38:59Z")
Hi Don, Just FYI i installed 5.1 to the server and rebooted it and now it works. Need to find another server and give it a reboot and then see if that solves it. ---
**Author:** ![ronnie-jorgensen](https://avatars.discourse-cdn.com/v4/letter/r/97f17d/32.png) [@ronnie-jorgensen](https://forums.powershell.org/u/ronnie-jorgensen)\ **Post date:** [October 16, 2017, 4:27pm UTC](https://forums.powershell.org/t/problems-enabling-psremoting-on-domain-joined-windows-2008-r2-server/9533/11 "2017-10-16T16:27:05Z")
So i restarted another server and although it still did not work after that. enable-psremoting now works and after that the enter-pssession -computerName server1 now works. will fix the rest of the servers and then get them all updated to 5.1 while im at it 🙂 ---
**Author:** ![dotnVo](https://avatars.discourse-cdn.com/v4/letter/d/4af34b/32.png) [@dotnVo](https://forums.powershell.org/u/dotnVo)\ **Post date:** [May 16, 2024, 8:37pm UTC](https://forums.powershell.org/t/problems-enabling-psremoting-on-domain-joined-windows-2008-r2-server/9533/12 "2024-05-16T20:37:21Z")