1. POWERSHELL REMOTING – THEORY & PRACTICE ROBERT PRÜST

2. WHO AM I? @r_prust https://www.linkedin.com/in/rprust http://powershellpr0mpt.com

3. AGENDA Why use PowerShell Remoting? Why use PowerShell Remoting? Enable PowerShell Remoting Enable PowerShell Remoting Using PowerShell Remoting Using PowerShell Remoting

4. WHY USE POWERSHELL REMOTING What is PowerShell remoting? What is PowerShell remoting? How does it work? How does it work? Why is it important? Why is it important?

5. WHAT IS POWERSHELL REMOTING

6. HOW DOES IT WORK

7. Remote Computer Your Computer PowerShell.exePS_ISEPS Studio HTTP Listener WSMAN [HTTP] WSMAN [HTTP] Windows Remote Management [WinRM] Service PowerShell.exe EndPoint: PowerShell x64 PowerShell.exe EndPoint: PowerShell x86 Whatever EndPoint: Something else

8. IMPORTANT INFO Web Services for Management (WS-MAN) and Windows Remote Management [WinRM] Web Services for Management (WS-MAN) and Windows Remote Management [WinRM] HTTP [5985, default] HTTPS [5986] HTTP [5985, default] HTTPS [5986] Serialize objects output to XML on remote machine, deserialize XML back to objects Serialize objects output to XML on remote machine, deserialize XML back to objects

9. WHY IS IT IMPORTANT Automation Automation Windows Server Core Windows Server Core Windows Nano Server Windows Nano Server Azure Azure Office 365 Office 365

10. ENABLE REMOTING - DEMO Local Machine Local Machine Remote Server & Client – in Domain environment Remote Server & Client – in Domain environment Remote Server & Client – in Workgroup environment Remote Server & Client – in Workgroup environment

11. USING REMOTING 1:1 1:1 1:N 1:N Persistent Sessions Persistent Sessions Implicit Remoting Implicit Remoting

12. 1:1 REMOTING Interactive like Telnet/SSH Interactive like Telnet/SSH Does not load or process profile scripts Does not load or process profile scripts Enter-PSSession –ComputerName Enter-PSSession –ComputerName BEWARE: second-hop remoting BEWARE: second-hop remoting Demo Demo

13. 1:N REMOTING Focussed on Automation Focussed on Automation Invoke-Command –ComputerName –FilePath file.ps1 Invoke-Command –ComputerName –FilePath file.ps1 Invoke-Command –ComputerName –ScriptBlock { } Invoke-Command –ComputerName –ScriptBlock { } Demo Demo

14. PERSISTENT SESSIONS Reduce overhead/Increase speed Reduce overhead/Increase speed Preserve state Preserve state Demo Demo

15. IMPLICIT REMOTING Obtain access to remote modules Obtain access to remote modules Demo Demo

16. EXTRA INFO EXTRA INFO PowerShell WebAccess PowerShell WebAccess Constrained Endpoints Constrained Endpoints

17. QUESTIONS? Thank you for your attention!