远程执行Powershell脚本

Question

I have a powershell script stored on a server and need certain users to be able to send a command to run this script from their workstations. I have went onto the server and run the command to allow remote powershell. Below is the script I am running along with a screen shot of my error.

invoke-command { powershell.exe -noprofile -executionpolicy Bypass C:\script directory } -computername  -credential (domain).local\Administrator

Answer 1

you must perform some tuning to run remote powershell. may be some of these rules doesn't apply.

1. enable ps-remoting

powershell -noprofile -command Enable-PsRemoting -Force

2. enable wimRm service (Windows remote administration)

sc config "WinRM" start= delayed-auto

sc start "WinRM"

3. add firewall rules for winRm service

netsh advfirewall firewall set rule name="Windows Remote Management (HTTP-In)" profile=domain new enable=yes

netsh advfirewall firewall set rule name="Windows Remote Management (HTTP-In)" profile=private,public new enable=yes profile=private,public

4. lookup WS-Management TrustedHost content

winrm g winrm/config/client

you will get something like

    Client
      NetworkDelayms = 5000
      URLPrefix = wsman
      AllowUnencrypted = false
    Auth
      Basic = true
      Digest = true
      Kerberos = true
      Negotiate = true
      Certificate = true
      CredSSP = false
    DefaultPorts
      HTTP = 5985
      HTTPS = 5986
    TrustedHosts = MyComputer

5. update list of trusted hosts to fit the workstations allowed to connect

winrm s winrm/config/client @{TrustedHosts="server,computer01,computer02,etc"}

you can check if it works with

winrm quickconfig

I think that's all. hope it helps

Answer 2

@user326334

I post another answer because I need to clarify myself. perhaps I completely misunderstood you, and I need to view exact description of error.

but some comments...

Invoke-command may run powershell commands directly.

the script you're calling contains spaces in path, consider quoting.

I may miss something but I think you are mixing Invoke-Command parameters with powershell cmdLets as -credential... with read-host -Prompt...

try this and let me know what's happening

$s = New-PSSession -computer "server" -credential "domain.local\Administrator"

Invoke-Command -Session $s -ScriptBlock { ... }

for instance, this work perfectly for me

$s = New-PSSession -computer "LENOVO" -credential "lenovo\administrador"
Invoke-Command -Session $s -ScriptBlock { ([Security.Principal.WindowsPrincipal] [Security.Principal.WindowsIdentity]::GetCurrent()).IsInRole([Security.Principal‌​.WindowsBuiltInRole]::Administrator) }
Invoke-Command -Session $s -ScriptBlock { cmd /c "sc query remoteregistry"; $lastexitcode } 
Invoke-Command -Session $s -ScriptBlock { Get-WSManInstance -ResourceURI winrm/config/client | select -ExpandProperty TrustedHosts}

if still in trouble, may be the authentication mode you're using.

please visit this and this for further information