search

WinRb / WinRM

Ruby library for Windows Remote Management
Apache License 2.0
412 stars 118 forks source link

Connecting to a different Configuration (Powershell) #238

Open brendanmeyer opened 8 years ago

brendanmeyer commented 8 years ago

Hi, I was wondering it the ability to connect to predefined PowerShell ConfigurationName with WinRM as you can with Enter-PSSession

for example the equivalent with Enter-PSSession command Enter-PSSession -ComputerName -ConfigurationName "differentconfiguration"

If it currently isn't possible, it would be a great feature, as it will allow different configurations which in turn allows remote scripts to run as a standard user with restricted commands instead of more full powered powershell session.

Thank you Brendan

mwrock commented 8 years ago

Its not currently supported. Its actually not a feature of the PSRP specification but is a convenience implementation of the Windows native PSRP client (powershell remoting). That does not at all mean it would not be considerd for implementation here.

brendanmeyer commented 8 years ago

Thank you for the information. I will keep any eye on the project.

fwininger commented 4 years ago

Hello @mwrock, we would like to use JEA to enforce some restriction on our admin user.

I can develop this feature, do you have some link to understand how it's implemented by MS ?

fwininger commented 4 years ago

I think I have enough information to develop a PR for this.

brendanmeyer commented 4 years ago

that would be great, and very useful for adding restricted sessions, thank you

It would also be nice for this to work with Invoke-Command if possible as well

fwininger commented 4 years ago

I'm able to connect a JEA session but I have a issue with the current implementation of this gem because after the PSRP pipeline is open the gem use : 

Invoke-Expression -Command "body_script"

So right now, I need to allow Invoke-Expression in the JEA session and that is a insecure command.