Configure Powershell Impersonation remotely

[DigitalDentist]

Is there anyway to configure powershell impersonation remotely? I am trying to run a few different powershell scripts and I'm getting access denied. I assume BC it's running as system. Is there a way around this ? Or a way to configure this option remotely?

This is the script I'm trying to run. It runs fine under my account.

Import-Module ActiveDirectory
Get-ADComputer -Filter {OperatingSystem -Like "Windows 7*"} | foreach {restart-computer $_.name -force}

 

Thanks in advance

 

 

[Paul]

Copy the encrypted values from the registry from a configured system and set them via an automation script.

HKLM:\SOFTWARE\MMSOFT Design\PC Monitor\PowerShellUserImpersonation
HKLM:\SOFTWARE\MMSOFT Design\PC Monitor\PowerShellUserImpersonationDomain
HKLM:\SOFTWARE\MMSOFT Design\PC Monitor\PowerShellUserImpersonationPassword
HKLM:\SOFTWARE\MMSOFT Design\PC Monitor\PowerShellUserImpersonationPasswordCtrl
HKLM:\SOFTWARE\MMSOFT Design\PC Monitor\PowerShellUserImpersonationUsername

-Paul

[DigitalDentist]

Awesome thank you!

[DigitalDentist]

On 7/6/2017 at 3:05 AM, Paul said:

Copy the encrypted values from the registry from a configured system and set them via an automation script.

HKLM:\SOFTWARE\MMSOFT Design\PC Monitor\PowerShellUserImpersonation
HKLM:\SOFTWARE\MMSOFT Design\PC Monitor\PowerShellUserImpersonationDomain
HKLM:\SOFTWARE\MMSOFT Design\PC Monitor\PowerShellUserImpersonationPassword
HKLM:\SOFTWARE\MMSOFT Design\PC Monitor\PowerShellUserImpersonationPasswordCtrl
HKLM:\SOFTWARE\MMSOFT Design\PC Monitor\PowerShellUserImpersonationUsername

-Paul

Ok so I do this, then the window update script fails with an error can't call a null expression...the reboot script works however. Is there a way to have both work?

[Paul]

Can I have the full error message?

-Paul

[DigitalDentist]

The account is an account with sufficient rights. 

[Paul]

Apparently it doesn't... Try using the built-in administrator account. With Windows 10 "Administrator" accounts don't have the same access level as the built-in administrator account.

-Paul

[DigitalDentist]

The account is domain admin on server 2012 R2. Uac disabled. Wmf 5 1