question

LorenzoFongaro-0341 avatar image
0 Votes"
LorenzoFongaro-0341 asked DavidThatcher-1230 edited

Windows Admin Center installed on a Windows 10 21h1 PC and several Windows 2019 Datacenter servers

Good morning.

Here's the scenario: Windows Admin Center 1.3.38660.0 installed on a Windows 10 21h1 64bit PC that needs to control several virtual servers on the same network and running with Windows Server 2019 Datacenter.

I installed Windows Admin Center on the Windows 10 PC that I received from the company I work for. I would like to check all Windows 2019 virtual servers as well as some Windows 10 21h1 PCs as well.

I proceeded to enter the names of the servers and PCs looking for them directly in the active directory. For this reason all the names listed are those of DNS. The servers in question are all on, working and reachable. When I try to make a connection to any of them I get this error message:

Connection to remote server (followed by server dns name) failed with the following error message: Windows Remote Management failed to complete the operation. Verify that the specified computer name is valid, that the computer is accessible over the network, and that a firewall exception is enabled for the Windows Remote Management service that allows access to this computer. By default, the Firewall exception for Remote Management for public profiles restricts access to remote computers that belong to the same local subnet. For more information, see the Help topic about_Remote_Troubleshooting."

In the guide I couldn't find the voice about_Remote_Troubleshooting."

I tried to check the firewall rules and noticed that already there is a rule that allows traffic for the Windows Remote Management service.

I don't have much experience with Windows firewall, which is why I ask you for help.

112234-1.jpg112222-3.jpg


windows-10-generalwindows-server-2019
1.jpg (74.8 KiB)
3.jpg (232.8 KiB)
· 3
5 |1600 characters needed characters left characters exceeded
Toggle Comment visibility. Current Visibility: Visible to all users

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Reza-Ameri avatar image Reza-Ameri ·

To check if firewall is preventing it or not, turn off the firewall and see if it works.
If yes, turn on the Firewall and let us know so we could help you with the troubleshooting.
If not, it means something else causing this problem.
Is your PC part of Domain?
Make sure you have sufficient permission to access them.

0 Votes 0 ·
JennyYan-MSFT avatar image JennyYan-MSFT ·

Hi,
I am checking to see how things are going there on this issue.

Please let me know if you would like further assistance.


Thanks,
Jenny

0 Votes 0 ·
DavidThatcher-1230 avatar image DavidThatcher-1230 ·

I updated dozens of computers to 21H1 that had Powershell remoting enabled and it disabled Powershell remoting on every one of them! :( This will absolutely cause problems for Admin Center. Recommending pushing a configuration to enable Powershell remoting using GPOs or something similar so whenever it gets turned off, it gets turned on again.
Will be keeping my eyes out for whether 21H2 does this as well.

0 Votes 0 ·

2 Answers

JennyYan-MSFT avatar image
0 Votes"
JennyYan-MSFT answered JennyYan-MSFT commented

Hi,

Was this a common issue when connecting to either server 2019 or windows 10 client?

As per the known issue, it mentioned that: Windows 10 does not have WinRM/PowerShell remoting on by default.
112400-1.png

Reference link:
https://docs.microsoft.com/en-us/windows-server/manage/windows-admin-center/support/known-issues#computer-management-solution

1.Please verify if the WinRM service has been enabled for computers running windows 10 operating system. If not run above command and it will make following changes:

  • Starts the Windows Remote Management (WinRM) service and sets it for automatic startup

  • Creates a listener to accept remote requests on any IP address

  • Enables a firewall exception for WS-Management

  • Makes some additional under-the-hood changes to support PowerShell remoting sessions and workflows

2.I tried to check the firewall rules and noticed that already there is a rule that allows traffic for the Windows Remote Management service.
Is this firewall rule has been setup in either your windows 10 and other computers or VMs that supposed to be managed via Windows Admin Center?

Hope this helps and please help to accept as Answer if the response is useful.

Thanks,
Jenny





1.png (16.3 KiB)
· 1
5 |1600 characters needed characters left characters exceeded
Toggle Comment visibility. Current Visibility: Visible to all users

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

JennyYan-MSFT avatar image JennyYan-MSFT ·

Hi,
Is there any update? Have you got a chance to verify above suggestions?

Please feel free to let us know if more assistance needed.

Hope this helps and please help to accept as Answer if the response is useful.

Thanks,
Jenny

0 Votes 0 ·
LorenzoFongaro-0341 avatar image
0 Votes"
LorenzoFongaro-0341 answered

Hello everyone. I apologise for the time that has passed since my last answer, but I have only been able to take this matter seriously in the last few days. I started to study the configuration of Windows Admin Center under HTTPS. I found this guide:

https://btps-secpack.com/winrm-over-https

I have reached the point where you have to configure the certificate, however today I was informed that it seems to have been announced the existence of an additional security bug zero days without workaround which concerns the CA. Luckily our Windows 2019 servers have not installed the feature called Certification Authority. I have no experience in the field, can you give me some advice on how to create the necessary self-signed certificates using something else as an alternative to the aforementioned functionality? Ps. Can you give me some information about this latest security bug? cordiality.

5 |1600 characters needed characters left characters exceeded
Toggle Comment visibility. Current Visibility: Visible to all users

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.