Technical Tip: How to enable Windows Remote Management for incident remediation
Description
This article describes how to configure windows servers in order to allow FortiSIEM to automatically remediate problems based a customer's configuration on incident remediation.
Solution
To enable winRM service and set authentication, run the following commands on target Windows servers:
This article describes how to configure windows servers in order to allow FortiSIEM to automatically remediate problems based a customer's configuration on incident remediation.
Solution
To enable winRM service and set authentication, run the following commands on target Windows servers:
1) Log into a windows server with administrative rights
2) Open the windows start menu
3) Type CMD and press enter
4) Enter the following commands:
winrm quickconfig
winrm set winrm/config/service/auth @{Basic="true"}winrm set winrm/config/service @{AllowUnencrypted="true"}