Windows Powershell Remoting into Non-Domain Joined System

powershell-non-domain-remoting.md

Powershell Remoting to a Non-Domain Host

1. From an admin shell, enable PS remoting on the machine you wish to access:

New-ItemProperty -Name LocalAccountTokenFilterPolicy `
  -Path HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System `
  -PropertyType DWord -Value 1

Enable-PsRemoting -Force

2. From an admin shell, configure your client system to allow remote connections to non-domain machines

Set-Item WSMan:\localhost\Client\TrustedHosts -Value "*" -Force

3. Connect to the remote machine using the exact login credentials. For example, a local user would provide SERVER\username and password.

$SERVER = 'REMOTE_SERVER'
$USER   = 'REMOTE_USER'
Set-ItemProperty 'HKLM:\SOFTWARE\Microsoft\PowerShell\1\ShellIds' ConsolePrompting $true
Invoke-Command -Computer $SERVER -Credential (get-credential "$SERVER\$USER") { ls C:\ }

There is a backquote missing on 2nd line, but great, thanks. BTW if the Set-Item call fails, it means remote WS Management on localhost has not been correctly configured, e.g. winrm quickconfig

Thanks this was immensely helpful.

@basezen thanks, I fixed the line
@lyoungstratus you're welcome

I didn't need ConsolePrompting set. Is #1 risky?