WinRM (Windows Remote Management) is the protocol underlying PowerShell Remoting — the foundation for managing Windows machines at scale without RDP or physical access.
# Enable WinRM on the target machine (run as admin, on the remote machine or via GPO for many machines)
Enable-PSRemoting -Force
# From the admin's machine: run a command on a remote server
Invoke-Command -ComputerName "SERVER01" -ScriptBlock { Get-Service | Where Status -eq 'Stopped' }
# Open a full interactive remote session
Enter-PSSession -ComputerName "SERVER01"
# Run the same command across MANY servers at once
Invoke-Command -ComputerName "SERVER01","SERVER02","SERVER03" -ScriptBlock { Get-Date }
Security Considerations
WinRM traffic is encrypted by default when using Kerberos within a domain, but connecting to a non-domain machine requires either HTTPS configuration or explicitly trusting the host — never disable encryption just to make an out-of-domain connection “work,” since that exposes credentials on the wire.