I have two Windows 2012 servers in a Windows Failover cluster. I was trying to look at the shares under the Fileserver role. It kept spinning and returned error:
“There were errors retrieving the file shares.” One of the troubleshooting steps is to check WinRM.
When running the command:
winrm id -r:myserver
I received the standard error:
Message = The client cannot connect to the destination specified in the request. Verify that the service on the destination is running and is accepting requests. Consult the logs and documentation for the WS-Management service running on the destination, most commonly IIS or WinRM. If the destination is the WinRM service, run the following command on the destination to analyze and configure the WinRM service: "winrm quickconfig". Error number: -2144108526 0x80338012
On my workstations, winrm is working correctly, so I was unsure where the problem was.
When I run
winrm enumerate winrm/config/listener I got this weird:
Listener [Source="GPO"]
Address = *
Transport = HTTP
Port = 5985
Hostname
Enabled = true
URLPrefix = wsman
CertificateThumbprint
ListeningOn = null
Listener [Source="Compatibility"]
Address = *
Transport = HTTP
Port = 80
Hostname
Enabled = true
URLPrefix = wsman
CertificateThumbprint
ListeningOn = null
Listener [Source="Compatibility"]
Address = *
Transport = HTTPS
Port = 443
Hostname = server.network.home
Enabled = true
URLPrefix = wsman
CertificateThumbprint = d1 ef b5 c3 64 48 c1 24 9b 3f h8 24 bb 68 8f 0354 27 64 df
ListeningOn = null
The "ListeningOn = null" was strange. I have WinRM configured using group policy. After some research, discovered article
Unable to Use Server Manager Remotely to help me realize that my group policy IPv4 filter was not set. The article suggested that I create a new instance of the HTTP Listener for all IPs using (
winrm create winrm/config/Listener?Address=*+Transport=HTTP ) . But I have that configured in GPO. I double checked between the two GPOs that I have for clients and servers, and discovered that I did not set an IPv4 filter for servers.
Once I entered it, ran gpupdate on servers and restared WinRM Service, all was good again.