Remoting not working from non-domain joined server

R

Robinnet

Working on our monitoring tools and ran into this problem.

The probe is running Windows Server 2012R2 and is not joined to a domain. The server is a domain joined server and the user account is a domain account.

Following command emulates the error:

PS C:\Users\robin> invoke-command -computername FQDN {get-UICulture} -credential sa.prtg -Authentication kerberos
[FQDN] Connecting to remote server FQDN failed with the following error
message : WinRM cannot process the request. The following error with errorcode 0x80090311 occurred while using Kerbero
s authentication: There are currently no logon servers available to service the logon request.
Possible causes are:
-The user name or password specified are invalid.
-Kerberos is used when no authentication method and no user name are specified.
-Kerberos accepts domain user names, but not local user names.
-The Service Principal Name (SPN) for the remote computer name and port does not exist.
-The client and remote computers are in different domains and there is no trust between the two domains.
After checking for the above issues, try the following:
-Check the Event Viewer for events related to authentication.
-Change the authentication method; add the destination computer to the WinRM TrustedHosts configuration setting or us
e HTTPS transport.
Note that computers in the TrustedHosts list might not be authenticated.
-For more information about WinRM configuration, run the following command: winrm help config. For more information,
see the about_Remote_Troubleshooting Help topic.
+ CategoryInfo : OpenError: (FQDN:String) [], PSRemotingTransportException
+ FullyQualifiedErrorId : AuthenticationFailed,PSSessionStateBroken

Continue reading...
 
Back
Top Bottom