Lemonde
  • Lemonde
  • 100% (Exalted)
  • Advanced Member Topic Starter
4 years ago
Is this a firewall issue or a service issue do you think?


Log Name: System
Source: Microsoft-Windows-WinRM
Date: 3/27/2020 4:37:34 PM
Event ID: 10149
Task Category: None
Level: Warning
Keywords: Classic
User: N/A
Computer: serverVM1.domain.local
Description:
The WinRM service is not listening for WS-Management requests.
User Action
If you did not intentionally stop the service, use the following command to see the WinRM configuration:
winrm enumerate winrm/config/listener
Event Xml:



10149
0
3
0
0
0x80000000000000

9599616388


System
serverVM1.domain.local





Sponsor

Want to thank us? Use: Patreon or PayPal or Bitcoins: bc1q4whppe29dw77rm4kv4pln0gqae4yjnxly0dny0hky6yhnafukzjsyrsqhk

All opinions expressed within these pages are sent in by members of the public or by our staff in their spare time, and as such do not represent any opinion held by sircles.net Ltd or their partners.


Lemonde
  • Lemonde
  • 100% (Exalted)
  • Advanced Member Topic Starter
3 years ago
If you follow the command in the event ID, by running it in an elevated command prompt:

winrm enumerate winrm/config/listener

You should see something like:

UserPostedImage

If you do not see the local IP of the server, but only the 127.0.0.1 address then delete the entry with:

netsh http delete iplisten 127.0.0.1

Then run winrm enumerate winrm/config/listener again and see if the local IP is present now.

If the list is blank, run: winrm quickconfig