Limit remote server management through winrm from specific subnet

[Dragan979]

We need to restrict WinRM access to workstations from specific subnet, for everyone (including Domain Administrators)

Set-Item wsman:\localhost\client\trustedhosts 19.20.30.*


But access is possible from every subnet, after some research i found out above command limits only outgoing connection.


We tried following:

Windows Components/Windows Remote Management (WinRM)/WinRM Service

IPv4 filter: workstation subnet only

if in IPV4 filter is any other subnet, i can't WinRm to machines in worksation subnet

Can WinRm from any subnet to workstation subnet

How to limit WinRM for specific subnet only

Continue reading...