test-wsman error with fqdn

Question

question

OlivierSimon-9210 asked Apr 22, '22 MotoX80 commented Apr 26, '22

test-wsman error with fqdn

Hi,
I have a windows 2016 server whose name is romulus.admiveli.local:
PS C:\Windows\system32> nslookup romulus
Serveur : localhost
Address: 127.0.0.1
Nom : romulus.admiveli.local
Address: 192.168.127.1

when i do:
PS C:\Windows\system32> Test-WSMan -ComputerName localhost
wsmid : http://schemas.dmtf.org/wbem/wsman/identity/1/wsmanidentity.xsd
ProtocolVersion : http://schemas.dmtf.org/wbem/wsman/1/wsman.xsd
ProductVendor : Microsoft Corporation
ProductVersion : OS: 0.0.0 SP: 0.0 Stack: 3.0

but:
PS C:\Windows\system32> Test-WSMan -ComputerName romulus.admiveli.local
Test-WSMan : <f:WSManFault xmlns:f="http://schemas.microsoft.com/wbem/wsman/1/wsmanfault" Code="2150859026"
Machine="ROMULUS.admiveli.local"><f:Message>La connexion à l’hôte distant spécifié a été rejetée. Vérifiez que le
service Gestion des services Web est en cours d’exécution sur l’hôte distant et configuré pour écouter les demandes
sur le port et l’URL HTTP corrects. </f:Message></f:WSManFault>
Au caractère Ligne:1 : 1
+ Test-WSMan -ComputerName romulus.admiveli.local
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : InvalidOperation : (romulus.admiveli.local:String) [Test-WSMan], InvalidOperationExcepti
on
+ FullyQualifiedErrorId : WsManError,Microsoft.WSMan.Management.TestWSManCommand

Any idea?

windows-server-2016 windows-server-management

· 1

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

MotoX80 · Apr 23 at 02:57 PM

Do you get the same error if you run it from another computer?

I don't see why you would need to run a remote call to the local computer. From another computer, yes.

Maybe something in the configuration??? https://docs.microsoft.com/en-us/windows/win32/winrm/installation-and-configuration-for-windows-remote-management

What about the system/security/application event logs, any error logged? Also check: Windows Event Logs > Applications and Services Logs > Microsoft > Windows > Windows Remote Management > Operational

0 ·

Answer 1 · 2022-04-25T08:47:31.813Z

OlivierSimon-9210 answered Apr 25, '22

From another computer, same error:

PS C:\Windows\system32> Test-WSMan romulus.admiveli.local
Test-WSMan : <f:WSManFault xmlns:f="http://schemas.microsoft.com/wbem/wsman/1/wsmanfault" Code="2150859026"
Machine="REMUS.admiveli.local"><f:Message>La connexion à l’hôte distant spécifié a été rejetée. Vérifiez que le
service Gestion des services Web est en cours d’exécution sur l’hôte distant et configuré pour écouter les demandes
sur le port et l’URL HTTP corrects. </f:Message></f:WSManFault>
Au caractère Ligne:1 : 1
+ Test-WSMan romulus.admiveli.local
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : InvalidOperation : (romulus.admiveli.local:String) [Test-WSMan], InvalidOperationExcepti
on
+ FullyQualifiedErrorId : WsManError,Microsoft.WSMan.Management.TestWSManCommand

Also i checked Windows Event Logs > Applications and Services Logs > Microsoft > Windows > Windows Remote Management > Operational:

L’opération WSMan Identify a démarré sans l’URI de ressource NotSpecified
L’opération WSMan Identify a échoué, code d’erreur 2150859026

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 2 · 2022-04-25T13:25:37.39Z

MotoX80 answered Apr 25, '22 MotoX80 edited Apr 25, '22

I believe that the "dot one" address is normally the router. Are you sure that you have the correct IP address? You are using the localhost as the DNS server,. What about the rest of the machines on your network? What DNS servers are they using?

Does this command show that it is listening on 192.168.127.1?

   winrm enumerate winrm/config/listener

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 3 · 2022-04-25T13:36:17.053Z

OlivierSimon-9210 answered Apr 25, '22

Yes 192.168.127.1 is the correct address. It is the domain controller and all the machines of the domain use 192.168.127.1 as the DNS Server.
PS C:\Windows\system32> winrm e winrm/config/listener
Listener
Address = *
Transport = HTTP
Port = 5985
Hostname
Enabled = true
URLPrefix = wsman
CertificateThumbprint
ListeningOn = 127.0.0.1, 192.168.127.1, ::1, fe80::5efe:192.168.127.1%7, fe80::ffff:ffff:fffe%4, fe80::90a6:18aa:8767:7c0e%2

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 4 · 2022-04-25T14:28:21.52Z

MotoX80 answered Apr 25, '22

This site suggests that the Code="2150859026" error is a firewall issue and to set the Network Location to Private.

https://social.technet.microsoft.com/Forums/en-US/0ee1c380-d75a-49aa-8508-aa8a05c888de/winrm-local-connectivity-issue

Or maybe enable the WinRM rule for Public.

capture.png (69.1 KiB)

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 5 · 2022-04-26T09:41:09.4Z

OlivierSimon-9210 answered Apr 26, '22 MotoX80 commented Apr 26, '22

The public winrm rule was enabled. I tried several configurations: I put the private/domain to private, I disabled the public rule. But always the same error:
L’opération WSMan Identify a échoué, code d’erreur 2150859026
Now I m on holidays until the end of the week but always interested in your suggestions.

· 1

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

MotoX80 · Apr 26 at 05:30 PM

I don't think that I will be much help. At this point all I am doing is searching the internet for 2150859026.

My only other thought was to configure the firewall to "log dropped packets" for all profiles. That way if your problem is some firewall rule, you should get an event in the log file.

0 ·

capture.png (175.2 KiB)

question