WIN - Windows Event Forwarding (WinRM)

Description

This remediation configures the Windows Event Forwarding: -Add NETWORK SERVICE to Administrators group -Add NETWORK SERVICE to Eventlog Readers group -Set WinRM Service startup type to Automatic -Check if WinRM Service status is running

Target: All devices.

Script language: Powershell.

Credentials

NT Authority/SYSTEM

Input

None

Output