-
Notifications
You must be signed in to change notification settings - Fork 8
WSManServiceConfig
dscbot edited this page Jan 17, 2026
·
8 revisions
| Parameter | Attribute | DataType | Description | Allowed Values |
|---|---|---|---|---|
| IsSingleInstance | Key | System.String | Specifies the resource is a single instance, the value must be 'Yes'. | Yes |
| AllowUnencrypted | Write | System.Boolean | Allows the client computer to request unencrypted traffic. | |
| AuthBasic | Write | System.Boolean | Allows the WinRM service to use Basic authentication. | |
| AuthCbtHardeningLevel | Write | WSManAuthCbtHardeningLevel | Specifies the hardening level for Channel Binding Tokens (CBT) used in authentication. |
Strict, Relaxed, None
|
| AuthCertificate | Write | System.Boolean | Allows the WinRM service to use client certificate-based authentication. | |
| AuthCredSSP | Write | System.Boolean | Allows the WinRM service to use Credential Security Support Provider (CredSSP) authentication. | |
| AuthKerberos | Write | System.Boolean | Allows the WinRM service to use Kerberos authentication. | |
| AuthNegotiate | Write | System.Boolean | Allows the WinRM service to use Negotiate authentication. | |
| EnableCompatibilityHttpListener | Write | System.Boolean | Specifies whether the compatibility HTTP listener is enabled. | |
| EnableCompatibilityHttpsListener | Write | System.Boolean | Specifies whether the compatibility HTTPS listener is enabled. | |
| EnumerationTimeoutMS | Write | System.UInt32 | Specifies the idle time-out in milliseconds between Pull messages. | |
| MaxConcurrentOperationsPerUser | Write | System.UInt32 | Specifies the maximum number of concurrent operations that any user can remotely open on the same system. | |
| MaxConnections | Write | System.UInt32 | Specifies the maximum number of active requests that the service can process simultaneously. | |
| MaxPacketRetrievalTimeSeconds | Write | System.UInt32 | Specifies the maximum length of time, in seconds, the WinRM service takes to retrieve a packet. | |
| RootSDDL | Write | System.String | Specifies the security descriptor that controls remote access to the listener. | |
| Reasons | Read | WSManReason[] | Returns the reason a property is not in desired state. |
This resource is used configure WS-Man Service settings.
Enable compatibility HTTP and HTTPS listeners, set maximum connections to 100, allow CredSSP (not recommended) and allow unecrypted WS-Man Sessions (not recommended).
Configuration WSManServiceConfig_Config
{
Import-DscResource -Module WSManDsc
Node localhost
{
WSManServiceConfig ServiceConfig
{
IsSingleInstance = 'Yes'
MaxConnections = 100
AllowUnencrypted = $false
AuthCredSSP = $true
EnableCompatibilityHttpListener = $true
EnableCompatibilityHttpsListener = $true
} # End of WSManServiceConfig Resource
} # End of Node
} # End of Configuration