Repository navigation
Connecting to a different Configuration (Powershell) #238
Description
Hi, I was wondering it the ability to connect to predefined PowerShell ConfigurationName with WinRM as you can with Enter-PSSession
for example the equivalent with Enter-PSSession command
Enter-PSSession -ComputerName -ConfigurationName "differentconfiguration"
If it currently isn't possible, it would be a great feature, as it will allow different configurations which in turn allows remote scripts to run as a standard user with restricted commands instead of more full powered powershell session.
Thank you
Brendan
Activity
mwrock commentedon Oct 27, 2016
Its not currently supported. Its actually not a feature of the PSRP specification but is a convenience implementation of the Windows native PSRP client (powershell remoting). That does not at all mean it would not be considerd for implementation here.
brendanmeyer commentedon Oct 27, 2016
Thank you for the information. I will keep any eye on the project.
fwininger commentedon Mar 1, 2020
Hello @mwrock, we would like to use JEA to enforce some restriction on our admin user.
I can develop this feature, do you have some link to understand how it's implemented by MS ?
fwininger commentedon Mar 5, 2020
I think I have enough information to develop a PR for this.
brendanmeyer commentedon Mar 6, 2020
that would be great, and very useful for adding restricted sessions, thank you
It would also be nice for this to work with Invoke-Command if possible as well
fwininger commentedon Mar 6, 2020
I'm able to connect a JEA session but I have a issue with the current implementation of this gem because after the PSRP pipeline is open the gem use :
So right now, I need to allow Invoke-Expression in the JEA session and that is a insecure command.