PowerShell Remoting Introduction To

Jason Hofferle www.hofferle.com

@jhofferle

Don’t we already have remoting?

WMI remote access

Native executables with remote management

PSExec

ComputerName Parameter

Problems with current remoting?

No Consistency

DCOM / RPC

Security

Differences between local & remote

PowerShell v2 Feature

Built on Web Services for Management ( WSMAN )

Universal Method for Managing Remote Systems

Designed to be Secure and Reliable

PowerShell Remoting

Client Server

PowerShell Remoting Protocol Stack

Authentication

Basic

Digest

Kerberos

Negotiate

CredSSP

Where do I get it?

PowerShell Version 2

Windows 7

Server 2008 R2

Windows Management Framework Core

Enabling Remoting

WinRM Service

Listener

Firewall

Domain Remoting

Configure with Group Policy

Rely on Kerberos Authentication

CredSSP for Multiple Hops

LocalAccountTokenFilterPolicy ( Cross-Domain )

Workgroup Remoting

HTTPS or TrustedHosts on client

Enable-PSRemoting

Winrm.vbs

Get-Help about_remote_troubleshooting

Interactive Remoting

Fan-out Remoting out Remoting

Without Remoting

$computers | foreach {

Get-WinEvent -FilterHashTable @{

logname="security";id=4624}

-MaxEvents 20 -ComputerName $_

}

Without Remoting

6.23 Hours

0 1 2 3 4 5 6 7

100 Computers

With PowerShell Remoting

Invoke-Command

-ComputerName $computers

-ScriptBlock {

Get-WinEvent -FilterHashTable @{

logname="security";id=4624}

-MaxEvents 20

}

-ThrottleLimit 50

With vs Without Remoting

0 50 100 150 200 250 300 350 400

No Remoting

Remoting

Minutes

100 Computers

15 Seconds

6.23 Hours

6.23 Hours

15 Seconds

Remoting Performance

15

20

53

131

0 20 40 60 80 100 120 140

100

200

400

1000

Seconds

Co

mp

ute

rs

Free Resources

A layman’s guide to PowerShell 2.0 remoting

Ravikanth Chaganti

Administrator’s Guide to Windows PowerShell Remoting

Dr. Tobias Weltner, Aleksandar Nikolic & Richard Giles

Secrets of PowerShell Remoting

Don Jones, Dr. Tobias Weltner

Questions?