powershellwindow-server-2012windowswindows-server-2016winrm
With Windows Server 2012 R2 I can use the group WinRMRemoteWMIUsers__ to enable remote PowerShell execution via -CimSession for non-admin users. However, the group is missing on my Windows Server 2016 machines and I do not see any replacement for it except the Remote Management Users group. However it seems to me that it grants wider permissions than WinRMRemoteWMIUsers__.
Where is the WinRMRemoteWMIUsers__ group in Windows Server 2016?
Yes...a DC will have different rules (even on a 2008/2003.
You'll first need to set this:
http://technet.microsoft.com/en-us/library/cc785165%28WS.10%29.aspx
Then:
You'll need to change the Domain Controller policy setting as well:
RDP - Allow log on through Terminal Services
This security setting determines which users or groups have permission to log on as a Terminal Services client. By default, on domain controllers only Administrators have permission.
But you also shouldn't be allowing non-admins access to a domain controller...but you can determine your level of risk here...
Best Answer
KB3118385 seems to suggest that you can manually create it. Have you tried doing that?
EDIT: As Matthew stated below, here are the commands. Thanks Matthew!
And if that fails: