search

Remote Management

hashtag
Remote Session

CLI based:

  • WinRM (based on WS-Management) on port 5985/HTTP or 5986/HTTPS

    • Via cmdlet Enter-PSSession

  • SSH (Open-SSH server) on port 22 (default)

    • Via same way than Linux

GUI based:

  • RDP on port 3389

    • Via RDP Client such as Remmina

hashtag
Remote Command Execution

  • PsExcec (program) through SMB protocol on port 445

  • Invoke-Command (cmdlet) through WinRM

hashtag
Remote System Configuration & Monitoring

  • WMI (DCOM-RPC based) on port 135 + port range for data transfer channels

    • Via CMD.exe wmic

    • Via powershell cmdlets Get-WmiObject, Invoke-WmiMethod...

    • Via WinRM (will use port 5985/5986)

    • Via the Microsoft Management Console (MMC) with the WMI Control snap in.

  • Server Manager - GUI for server management. Works over WinRM.

PreviousExecution PolicyNextWindows Management Instrumentation (WMI)

Last updated