Remote Management

Remote Session

CLI based:

• WinRM (based on WS-Management) on port 5985/HTTP or 5986/HTTPS

  • Via cmdlet Enter-PSSession

• SSH (Open-SSH server) on port 22 (default)

  • Via same way than Linux

GUI based:

• RDP on port 3389

  • Via RDP Client such as Remmina

Remote Command Execution

• PsExcec (program) through SMB protocol on port 445

• Invoke-Command (cmdlet) through WinRM

Remote System Configuration & Monitoring

• WMI (DCOM-RPC based) on port 135 + port range for data transfer channels

  • Via CMD.exe wmic

  • Via powershell cmdlets Get-WmiObject, Invoke-WmiMethod...

  • Via WinRM (will use port 5985/5986)

  • Via the Microsoft Management Console (MMC) with the WMI Control snap in.

• Server Manager - GUI for server management. Works over WinRM.