You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The test should fail if a JEA configuration is applied and the service is running in context other than localsystem.
First iteration should check (Get-PSSessionConfiguration).name for presence of nfAdminJeaClientManagement
Also I would like to see the contents of:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinRM:ObjectName
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinRM:RequiredPrivileges
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinRM:Type
Expectations would be:
ObjectName - LocalSystem
RequiredPrivileges:
SeAssignPrimaryTokenPrivilege
SeAuditPrivilege
SeChangeNotifyPrivilege
SeCreateGlobalPrivilege
SeImpersonatePrivilege
SeTcbPrivilege
--> All of these need to be present. Order should be unimportant
The test should fail if a JEA configuration is applied and the service is running in context other than localsystem.
First iteration should check (Get-PSSessionConfiguration).name for presence of nfAdminJeaClientManagement
Also I would like to see the contents of:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinRM:ObjectName
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinRM:RequiredPrivileges
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinRM:Type
Expectations would be:
ObjectName - LocalSystem
RequiredPrivileges:
--> All of these need to be present. Order should be unimportant
Type - 0x00000010 (16)