# WinRM Services Configuration

Use Domain Group Policy to apply these settings to multiple windows machines.

![Figure 1: Group Policy Management](https://377464071-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FXhp08OmU8050PePmMgDt%2Fuploads%2F80IG4UMOrMJ5IX6007vU%2FWinRM%20Group%20Policy.png?alt=media\&token=e63039d9-be4a-4d21-8853-a32cbafb0206)

If configuring manually, run the following commands on each monitored machine:

1. Make sure WinRM is enabled. Run the following command:

```
winrm quickconfig
```

![Figure 2: WinRM QuickConfig Command](https://377464071-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FXhp08OmU8050PePmMgDt%2Fuploads%2FAZ37ZGdoOY6tLsXYp9Nx%2FWinRM%20quickconfig.png?alt=media\&token=995fd20a-992a-4b00-983f-3cbca383f227)

2. Enable **AllowUnencrypted**. Run the following command:

```
winrm set winrm/config/service @{AllowUnencrypted="true"}
```

![Figure 3: AllowUncrypted Command](https://377464071-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FXhp08OmU8050PePmMgDt%2Fuploads%2Fx5vip8fryVhVNzu2XZbB%2FWinRM%20allowencrypted.png?alt=media\&token=d1d00f48-9405-43f2-b7a3-fb1d22af7575)

3. Add **Gateway** host to WinRM trusted hosts. Run the following command:

```
winrm set winrm/config/client @{TrustedHosts="<Gateway Host 1>,<Gateway Host 2>,..."}
```

Please make sure the failover Gateway Host (when configured) is included.

![Figure 4: Add Gateway Host Command](https://377464071-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FXhp08OmU8050PePmMgDt%2Fuploads%2F5XT9dB8BhLYd1OcwSxeJ%2FWinRM%20trusted%20hosts.png?alt=media\&token=05580680-bab9-495d-b737-0281678c363f)

4. Enable **Basic Authentication**. (Optional)

If the monitored Windows host is a standalone computer (not part of a Domain), the Basic authentication must be enabled. Run the following command:

```
winrm set winrm/config/service/auth @{Basic="true"}
```

![Figure 5: Enable Basic Authentication Command](https://377464071-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FXhp08OmU8050PePmMgDt%2Fuploads%2FCSmOVDCwnDjy4OQaEtbI%2FWinRM%20basic%20auth.png?alt=media\&token=9f266658-5435-4a20-9d09-048b946b8aa8)

5. Verify if WinRM is running by opening Services.msc

![Figure 6: Services Window](https://377464071-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FXhp08OmU8050PePmMgDt%2Fuploads%2F1npOFckBXfO2CQBF7HpM%2FWinRM%20verification.png?alt=media\&token=886579fe-d913-4ce5-9f19-613db82424a1)