<br> Windows Remote Management (WinRM) service implements the WS-Management protocol for remote management. WS-Management is a standard web services protocol used for remote software and hardware management. The WinRM service listens on the network for WS-Management requests and processes them. <br> <br> Features that enable inbound network connections increase the attack surface. In a high <br> security environment, management of secure workstations should be handled locally. <br> Fixtext: <br> Fix: <br> (1) GPO: Computer ConfigurationWindows SettingsSecurity SettingsSystem ServicesWindows Remote Management (WS-Management) <br> <br> (2) REG: HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesWinRM!Start <br>

[Automatic/Manual/disable]

Fix: (1) GPO: Computer Configuration\Windows Settings\Security Settings\System Services\Windows Remote Management (WS-Management) (2) REG: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinRM!Start