# psRemote Fails Based on Source Computer Config

**URL:** <https://forums.powershell.org/t/psremote-fails-based-on-source-computer-config/14866>\
**Category:** PowerShell Help\
**Created:** [August 26, 2020, 12:16pm UTC](https://forums.powershell.org/t/psremote-fails-based-on-source-computer-config/14866 "2020-08-26T12:16:38Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![treyshaffer-family-c](https://avatars.discourse-cdn.com/v4/letter/t/97f17d/32.png) [@treyshaffer-family-c](https://forums.powershell.org/u/treyshaffer-family-c)\
**Post date:** [August 26, 2020, 12:16pm UTC](https://forums.powershell.org/t/psremote-fails-based-on-source-computer-config/14866/1 "2020-08-26T12:16:38Z")

</div>

I am unable to create a New-psSession FROM a group of computers. Attempting to do so returns an error which includes: "The WinRM client received an HTTP status code of 307 from the remote WS-Management service."

I've worked with remoting errors/configs always based on the configuration of the target computer. In this case the issue seems to be with the host initiating the call.

I have two groups of computers. Group A is older, Win2008. GroupB is Win2012R2. psRemoting is configured the same on all. All are subject to the same group policies.

From a machine in Group A, I can create a session on any computer in either group. This tells me psRemoting is configured on all.

I fail to create a remote session from ANY machine in Group B to any other machine, in either group.

Client Auth\CredSSP is enabled. The WinRM configurations on hosts is identical, included here:

Config MaxEnvelopeSizekb = 500 MaxTimeoutms = 60000 MaxBatchItems = 32000 MaxProviderRequests = 4294967295 Client NetworkDelayms = 5000 URLPrefix = wsman AllowUnencrypted = false Auth Basic = true Digest = true Kerberos = true Negotiate = true Certificate = true CredSSP = true DefaultPorts HTTP = 5985 HTTPS = 5986 TrustedHosts = \* Service RootSDDL = O:NSG:BAD:P(A;;GA;;;BA)(A;;GR;;;IU)S:P(AU;FA;GA;;;WD)(AU;SA;GXGW;;;WD) MaxConcurrentOperations = 4294967295 MaxConcurrentOperationsPerUser = 1500 EnumerationTimeoutms = 240000 MaxConnections = 300 MaxPacketRetrievalTimeSeconds = 120 AllowUnencrypted = true [Source="GPO"] Auth Basic = false Kerberos = true Negotiate = true Certificate = false CredSSP = false CbtHardeningLevel = Relaxed DefaultPorts HTTP = 5985 HTTPS = 5986 IPv4Filter = \* [Source="GPO"] IPv6Filter = \* [Source="GPO"] EnableCompatibilityHttpListener = false EnableCompatibilityHttpsListener = false CertificateThumbprint AllowRemoteAccess = true [Source="GPO"] Winrs AllowRemoteShellAccess = true IdleTimeout = 900000 [Source="GPO"] MaxConcurrentUsers = 2147483647 MaxShellRunTime = 2147483647 MaxProcessesPerShell = 2147483647 MaxMemoryPerShellMB = 2147483647 MaxShellsPerUser = 2147483647

What am I missing?

---

<div class="post-metadata">

**Author:** ![tonyd](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.powershell.org/tonyd/32/1041_2.png) [@tonyd](https://forums.powershell.org/u/tonyd)\
**Post date:** [August 27, 2020, 8:17am UTC](https://forums.powershell.org/t/psremote-fails-based-on-source-computer-config/14866/2 "2020-08-27T08:17:37Z")

</div>

You make the comment: “In this case the issue seems to be with the host initiating the call”

Have you checked the Trusted Hosts entry to make sure Group B is included in whatever you have defined?

Computer Configuration/Admin Templates/Windows Components/Windows Remote Management/WinRM Client

&nbsp;

---

<div class="post-metadata">

**Author:** ![treyshaffer-family-c](https://avatars.discourse-cdn.com/v4/letter/t/97f17d/32.png) [@treyshaffer-family-c](https://forums.powershell.org/u/treyshaffer-family-c)\
**Post date:** [August 27, 2020, 11:26am UTC](https://forums.powershell.org/t/psremote-fails-based-on-source-computer-config/14866/3 "2020-08-27T11:26:05Z")

</div>

Yes, TrustedHosts = \*. For some reason, Group B cannot create a connection to any host. Group A hosts can connect to Group A hosts and all Group B hosts. Same subnet. No switch/router/firewall. MS firewall is disabled on all hosts.

---

<div class="post-metadata">

**Author:** ![tonyd](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.powershell.org/tonyd/32/1041_2.png) [@tonyd](https://forums.powershell.org/u/tonyd)\
**Post date:** [August 27, 2020, 11:45am UTC](https://forums.powershell.org/t/psremote-fails-based-on-source-computer-config/14866/4 "2020-08-27T11:45:34Z")

</div>

I have also seen IPV6 cause odd issues with PSRemoting. I start with “Enable-PSRemoting -Force”, and somtimes would get the public profile error. Simply turning off IPV6 would solve that problem. Seemed odd to me this would fix the error, and I did not want to add -SkipNetworkPfrofileCheck.

Another issue that can crop up with PSRemoting is the Remote Registry service. Try enabling that on group B??

And lastly, make sure you can get to C$ on the group B hosts from the system running the remote queries.

Just thinking out loud. I have a script that audits remote systems and these are some of the issues I have seen. I am guessing you already know/have tried this, but you never know.

---

<div class="post-metadata">

**Author:** ![krzydoug](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.powershell.org/krzydoug/32/1008_2.png) [@krzydoug](https://forums.powershell.org/u/krzydoug)\
**Post date:** [August 27, 2020, 5:31pm UTC](https://forums.powershell.org/t/psremote-fails-based-on-source-computer-config/14866/5 "2020-08-27T17:31:15Z")

</div>

Good suggestion on the network profile. You can use

```
Get-NetConnectionProfile
```

and if it’s public change it with

```
Set-NetConnectionProfile
```

Trey you never said what A/V and firewall you are using. What does these commands show?

```
Test-WSMan -ComputerName GroupB-PC

Test-WSMan -ComputerName GroupA-PC
```

---

<div class="post-metadata">

**Author:** ![treyshaffer-family-c](https://avatars.discourse-cdn.com/v4/letter/t/97f17d/32.png) [@treyshaffer-family-c](https://forums.powershell.org/u/treyshaffer-family-c)\
**Post date:** [September 13, 2020, 5:37am UTC](https://forums.powershell.org/t/psremote-fails-based-on-source-computer-config/14866/6 "2020-09-13T05:37:05Z")

</div>

Thanks for input, but no progress.

Remember, this is not a case of configuring systems to ACCEPT a psSession or remote job. All these systems run remote jobs initiated from a management workstation. NONE of these systems, GroupB, can INITIATE a connection to another host.

---

<div class="post-metadata">

**Author:** ![dotnVo](https://avatars.discourse-cdn.com/v4/letter/d/4af34b/32.png) [@dotnVo](https://forums.powershell.org/u/dotnVo)\
**Post date:** [May 16, 2024, 8:28pm UTC](https://forums.powershell.org/t/psremote-fails-based-on-source-computer-config/14866/7 "2024-05-16T20:28:53Z")

</div>


