Windows Discovery Failing WinRM call
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
09-13-2020 04:49 AM
Hello Expert Team,
Looking for quick help here for Windows Machine discovery.In my setup I am running discovery for target host and its getting failed with below message while classification
Command [$env:PSModulePath = $env:PSModulePath + ";C:\SNOWDiscovery\agent/scripts/Powershell/WinRMAPI"] timed out after PT2M
We are using WinRM here in the discovery
Thanks
Sharad
- Labels:
-
Discovery
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
09-13-2020 10:12 AM
Please start by checking if WinRM is installed properly on the target: run th efollowing command on the destination to analyze and configure the WinRMservice: "winrm quickconfig. Please check the output you get
Please note that by default, no WinRM listener is configured. Even if the WinRM service is running, WS-Management protocol messages that request data can't be received nor sent, so running winrm quickconfig will help you troubleshoot if this service is running properly on the target or not. Winrm quickconfig will help you configure it on target
Use the Winrm command to locate listeners and the addresses by typing the following command at a command prompt:
winrm e winrm/config/listener
Other troubleshooting tips:
- Possible reasons could be that winrm ports are not opened.The default HTTP port is 5985. Running config checks should tell you which ports and prototocal (HTTP or HTTPs) target WinRM is configure to listen
- Check the default timeouts that can be used for any requests. The default is 60000 milliseconds. Again checking config will help you find this info. You can consider to increase it
- Are you able to scan other windows devices that are part of the same domain if yes then my guess is that your credentials are fine provided your system admins provide access at the domain level and not one server at a time.
- Are you able to scan other windows devices in the same IP Range or VLAN then my guess is that the firewall ports are open fine too provided your network administrators open ports at VLAN level and not at one target at a time.
Please like and or accept answer if it helps you.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-18-2023 05:42 PM
Thanks Vivek. your post really helps!

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
09-14-2020 12:22 AM
HI,
Also the version of Powershell and the MID server properties.
Thanks,
Ashutosh