How do I configure WinRM?

Entuity v19.0 upwards supports monitoring for Windows servers via WinRM. Before you can monitor Windows servers, you must configure WinRM on the server for remote management. Please see below for details on how to configure WinRM.

1. The WinRM service must be running on the Windows server that is to be monitored/discovered. Default installations of Microsoft Windows Server 2012 and above come with the WinRM service running by default, and so in this case no extra steps are needed.
   • If the server is running a different Windows OS version, or a non-defauilt configuration, the following command can be used to configure the server for remote management (note, this requires administrative privileges):

     winrm quickconfig

2. You must ensure that the WinRM service is not blocked by a firewall and therefore is remote accessible. By default, WinRM uses port 5985, which needs to be open. If WinRM is configured to use a non-default port, then this port needs to be open. Note, Entuity can use the non-default port.
3. You must ensure that a user account with appropriate privileges is used on the Windows server. The user account must be part of the local administrators group on the managed server. Entuity uses Microsoft's negotiate authentication method, allowing Entuity to manage Windows machines that are either part of the domain or not. You can use the following username formats to do so:
   
   • to manage a Windows OS that is part of the domain, use <domain>\<user> format, e.g. 'mydomain\username'
   • to manage a Windows OS that is not part of the domain, use just the username, e.g. 'Administrator'