Does the Windows Firewall service have to be running in order to use WS-Management? I really like this remoting capability, however, all of our servers have the service disabled. The only way I have been able to remote is with the service enabled. Any thoughts or should I give up on remoting for now?

bradn901cb wrote:

> Does the Windows Firewall service have to be running in order to use
> WS-Management? I really like this remoting capability, however, all of
> our servers have the service disabled. The only way I have been able to
> remote is with the service enabled. Any thoughts or should I give up on
> remoting for now?
>
>

You don't have to have the firewall running, but you'll have to do some
steps manually (versus running the automatic setup script).

I'll look them up, hopefully today, if nobody pipes up before me...

--
Microsoft MVP - Windows PowerShell
http://www.microsoft.com/mvp

PowerGadgets MVP
http://www.powergadgets.com/mvp

Blog:
http://marcoshaw.blogspot.com

That would be great! No rush for this.

Thanks

> You don't have to have the firewall running, but you'll have to do some
> steps manually (versus running the automatic setup script).
>
> I'll look them up, hopefully today, if nobody pipes up before me...

I don't have a test VM right now to go through this and double-check,
but from the script, I gather the following needs to be done:

1. Run this:
PSH>$pshome/configure-wsman.ps1 -action CreateShell

2. Run all of these from PowerShell:
winrm set winrm/config/winrs `'@{MaxShellsPerUser=`"16`"}`'
winrm set winrm/config/winrs `'@{MaxConcurrentUsers=`"5`"}`'
winrm set winrm/config/winrs `'@{MaxMemoryPerShellMB=`"150`"}`'
winrm set winrm/config `'@{MaxTimeoutms=`"180000`"}`'
winrm set winrm/config `'@{MaxProviderRequests=`"400`"}`'
winrm set winrm/config/Service `'@{MaxConnections=`"50`"}`'
winrm create winrm/config/Listener?Address=*+Transport=HTTP"

This will provide the same environment, except that the firewall
exceptions aren't added.

Marco