Enable WinRM monitoring on Windows endpoints

Download JSON Download Python

Ratings

Release Time

01/10/2018

Downloads

1358 times

Update Time

01/27/2025

Views

1128 times

Share-it:

Tags

enabled WinRM

Please refer attached script to Enable the WinRM and Change the Network Connection Profile to Private.

Run the script as System User

Procedure's Instructions

import os
import re

c= os.popen("ipconfig").read()

d=re.findall(". : (.*)",c)[0]
d=str(d).strip()
ps_content=r'''

Set-NetConnectionProfile -Name "%s" -NetworkCategory Private
Get-NetConnectionProfile
'''%(d)

import os

def ecmd(command):
    import ctypes
    from subprocess import PIPE, Popen
    
    class disable_file_system_redirection:
        _disable = ctypes.windll.kernel32.Wow64DisableWow64FsRedirection
        _revert = ctypes.windll.kernel32.Wow64RevertWow64FsRedirection
        def __enter__(self):
            self.old_value = ctypes.c_long()
            self.success = self._disable(ctypes.byref(self.old_value))
        def __exit__(self, type, value, traceback):
            if self.success:
                self._revert(self.old_value)
    
    with disable_file_system_redirection():
        obj = Popen(command, shell = True, stdout = PIPE, stderr = PIPE)
        out, err = obj.communicate()
        ret=obj.returncode
    if ret==0:
        if out:
            return out.strip()
        else:
            return ret
    else:
        if err:
            return err.strip()
        else:
            return ret

file_name='powershell_file.ps1'
file_path=os.path.join(os.environ['ProgramData'], file_name)
with open(file_path, 'wb') as wr:
    wr.write(ps_content)

ecmd('powershell "Set-ExecutionPolicy RemoteSigned"')
print ecmd('powershell "%s"'%file_path)
y=os.popen("winrm qc -quiet ").read()
print "Enabled WinRM Service Successfully"
print "Network Connection has been changed to Private..."

os.remove(file_path)

Comments

No Comments.

Enable WinRM monitoring on Windows endpoints

Comments

Leave a Comment