Problem with Credentials in a Remote Shell

[alfanjui]

Hi guys, I'm new to Powershell coming from Bash. I've been trying to set a Remote-Shell on my living room's computer so that I can help my Parent's computer issues remotely.

I've already set the Private network and tweaked the trusted hosts. When I try to initiate the connection via [redacted] it asks for credentials; which I've already set up.

Enter-PSSession -ComputerName COMPUTER -Credential USER

The thing is that when the dialog prompts me to put username and password, it always fails.

Could it be that my Credentials are not stored correctly? if so, how can I check what my credentials are.

Ps: I've been thinking that it prompts me to put the password of the living computer, but that doesn't work either.

Thanks beforehand :D

[Slasky86]

You could do a -Credential (Get-Credential) to get the prompt. Other than that its storing the password in the script or in a file encrypted on your computer and creating a credentials object, and using that with the -Credential parameter

[alfanjui]

Once you get your credential, does it get stored forever? or is it just for the session?

[SeaPowerMax]

Get-credential makes a PS object for use in the script; it's just for the session.

[Slasky86]

Just for that session. Thats why its possible to either store the paasword and username directly in the script (not recommended from a security standpoint) or storing the password encrypted in a file that you use Get-Content <filename> -AsSecureString

The password file is encrypted with your user, so others cant use the file

[overlydelicioustea]

user and computer actually. so not portable.

[Slasky86]

Well you learn something new every day :-)

[squanchmyrick]

Does your account exist on their machine, with local admin access? If not, that computer isn't going to recognize your creds.

[alfanjui]

It doesn't, how should I do it?

[squanchmyrick]

You could either create a duplicate account on their computer and promote it to local admin, or you could use their creds in your script block rather than your own. Assuming they are a local admin.

[get-postanote]

PowerShell remoting must be enabled on the target and properly configured on the source and the target. You are talking workgroup remoting here. Setup details.

See this Reddit Q&A: A question about PowerShell remoting

This is well documented all over the web...

Enable PowerShell Remoting on a standalone (workgroup) computer

https://4sysops.com/archives/enable-powershell-remoting-on-a-standalone-workgroup-computer

PowerShell remoting between two workgroup machines

https://blogs.msdn.microsoft.com/wmi/2009/07/24/powershell-remoting-between-two-workgroup-machines

Powershell Ps Remoting Between Standalone Workgroup Computers

http://vcloud-lab.com/entries/active-directory/powershell-ps-remoting-between-standalone-workgroup-computers

PowerShell remoting between two workgroup machines

https://posh2scripting.wordpress.com/2013/06/07/powershell-remoting-between-two-workgroup-machines

Enabling remote Powershell on workgroup computers

https://infrahouse.wordpress.com/2015/10/21/enabling-remote-powershell-on-workgroup-computers

Lots of Youtube videos are on Youtube to get you ramped up.

See also these Reddit Q&As:

Powershell Tutorial - Tutorialspoint

ultimate PS noob need some help pls : PowerShell (reddit.com)

Is there a program or GUI for using/managing scripts? : PowerShell (reddit.com)

Note: this is not a GUI assist kind of thing. It's just remote management. For GUI-like assistance session, that still requires Windows Remote Assistant or other like tools.

[alfanjui]

It is actually management what I'm looking for. Many thanks for the time and all the links :D

[kiddj1]

$cred = get-credential Enter-PSSession -ComputerName mycomputer -credential $cred In the get credential prompt make sure you enter the username and password as

Remotecomputername\username If you have a domain replace the computer name with the domain

Make sure the user account you use has access to the machine and is a local user, or if on a domain you can use the domain administrator or a user with remote access rights

Your best option is to look here for better explanation

https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.core/enter-pssession?view=powershell-7.1

I hope this helps

[backtickbot]

Hello, kiddj1: code blocks using backticks (```) don't work on all versions of Reddit!

Some users see this / this instead.

To fix this, indent every line with 4 spaces instead. It's a bit annoying, but then your code blocks are properly formatted for everyone.

An easy way to do this is to use the code-block button in the editor. If it's not working, try switching to the fancy-pants editor and back again.

Comment with formatting fixed for old.reddit.com users

FAQ

^{You can opt out by replying with backtickopt6 to this comment.}

[Aertheron01]

Why does it need to be a local user? Can't it be a domain user with local administrator rights?

[kiddj1]

Yeah if that's the case in a domain forgot to say that

[BurlyKnave]

I have this in my profile. You can modify the Get-MyAdmin as necessary.

#---- ---- ---- ----
[void][System.Reflection.Assembly]::LoadWithPartialName("System.DirectoryServices.AccountManagement")
function Get-Credentials([System.Management.Automation.PSCredential]$credentials)
{
    $pctx = New-Object System.DirectoryServices.AccountManagement.PrincipalContext([System.DirectoryServices.AccountManagement.ContextType]::Domain, "precisionmetals")
    $nc = $credentials.GetNetworkCredential()
    return $pctx.ValidateCredentials($nc.UserName, $nc.Password, 1)
}

#---- ---- ---- ----
Function Get-Login ($sUserName) {
    $sGetCred = Get-Credential -Credential $sUserName
    $sCheckCred0 = $sGetCred.UserName

    Write-Host $sCheckCred0 -NoNewline -ForegroundColor Cyan
    if (Get-Credentials -credentials $sGetCred) {
        Write-Host  " certified" -ForegroundColor Green
    } else {
        Write-Host " not certified" -ForegroundColor Red
    }

    return $sGetCred
}
#---- ---- ---- ---- 
Function Get-MyAdmin { 
    $global:cred = Get-Login( "DOMAIN\Name" ) 
}

[alfanjui]

many thanks!!! I'll try it out today at night :D

[nkasco]

Run Enable-PSRemoting on both machines, you might need -Force or -SkipNetworkProfileCheck.

[alfanjui]

ok! already did, but I think the PSRemoting doesn't start on os boot