Skip to content
This repository was archived by the owner on Apr 17, 2026. It is now read-only.
This repository was archived by the owner on Apr 17, 2026. It is now read-only.

redesign check for WinRM runas configuration #35

Description

@TuemmlerKelch

The test should fail if a JEA configuration is applied and the service is running in context other than localsystem.
First iteration should check (Get-PSSessionConfiguration).name for presence of nfAdminJeaClientManagement

Also I would like to see the contents of:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinRM:ObjectName
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinRM:RequiredPrivileges
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinRM:Type

Expectations would be:
ObjectName - LocalSystem
RequiredPrivileges:

  • SeAssignPrimaryTokenPrivilege
  • SeAuditPrivilege
  • SeChangeNotifyPrivilege
  • SeCreateGlobalPrivilege
  • SeImpersonatePrivilege
  • SeTcbPrivilege

--> All of these need to be present. Order should be unimportant

Type - 0x00000010 (16)

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    Fields

    No fields configured for Task.

    Projects

    No projects

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions