Technical Tip: How to enable Windows Remote Management for incident remediation

[yujames]

Description
This article describes how to configure windows servers in order to allow FortiSIEM to automatically remediate problems based a customer's configuration on incident remediation.

Solution
To enable winRM service and set authentication, run the following commands on target Windows servers:

   1) Log into a windows server with administrative rights

   2) Open the windows start menu

   3) Type CMD and press enter

   4) Enter the following commands:

winrm quickconfig
    winrm set winrm/config/service/auth @{Basic="true"}

    winrm set winrm/config/service @{AllowUnencrypted="true"}