Why do I get Access Denied when using WinRM?

Posted by Kev on Server Fault See other posts from Server Fault or by Kev
Published on 2010-04-23T02:23:33Z Indexed on 2010/04/23 2:24 UTC
Read the original article Hit count: 1137

Following on from this question:

Why does my PowerShell script hang when called in PSEXEC via a batch (.cmd) file?

I took the advice from Jim B and installed WinRM. To recap I have two servers:

  • HMon01 - runs Windows 2003 Standard SP2
  • Web1928 - runs Windows 2008 Standard SP2

Both servers are standalone.

I installed WinRM for Windows 2003 from here and configured WinRM as follows on both machines:

Client
    NetworkDelayms = 5000
    URLPrefix = wsman
    AllowUnencrypted = false
    Auth
        Basic = true
        Digest = true
        Kerberos = true
        Negotiate = true
        Certificate = true
    DefaultPorts
        HTTP = 80
        HTTPS = 443
    TrustedHosts = *

The problem I have is that if I remotely execute commands using the remote machine's built in Administrator account then all is well.

However I have an account on the remote machine named remoteexec which is a member of the Administrators group (we disable our Administrator accounts). If I use this account then I get Access Denied errors. I've done all the usual things such as checking passwords and the like.

Why would this be?

© Server Fault or respective owner

Related posts about windows-server-2003

Related posts about windows-server-2008