You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
-[Remove Shutdown Job Before It Runs](#remove-shutdown-job-before-it-runs)
@@ -36,7 +36,9 @@ Run Scope:
36
36
* Run under a system account service (choco / non-choco)
37
37
38
38
OS / PowerShell Scope:
39
-
* Windows 7 / 2008 R2, Windows 8.1 / 2012 R2, Windows 10 / 2016
39
+
* Windows 2008 R2 (Tested) / Windows 7 (Windows Version 6.1)
40
+
* Server 2012 R2 (Tested) / Windows 8.1 (Windows Version 6.3)
41
+
* Server 2016 (Tested) / Windows 10 (Windows Version 10.0)
40
42
41
43
# The Important Security Problem
42
44
Many windows remote orchestration tools (e.g. Packer) instruct you to open up winrm permissions in a way that is not safe for (nor intended for) use in production. (e.g. https://www.packer.io/docs/builders/ncloud.html#sample-code-of-template-json) Generally there is no guidance on how to re-secure it nor even a reminder to do so. The assumption most likely being that you would handle proper winrm re-configuration as a part of provisioning the machine - but in many organizations systems preparation may be the only use of WinRM - so it is forgotten. Or maybe whatever you use to re-configure it does not actively manage one of the permissive settings used during machine provisioning.
0 commit comments