>From here it looks like this is possible, although you would have to tweak user rights:
https://social.technet.microsoft.com/Forums/scriptcenter/en-US/60de5fcd-33e0-479b-9668-fcf683678a2f/winrm-for-nonadministrative-users?forum=ITCG I get the impression that the intention for WinRM is for admistrative access, however. Have a look at the first paragraph of this page: https://msdn.microsoft.com/en-us/library/windows/desktop/aa384295(v=vs.85).aspx Hope this helps. Please report back if you are able to get this working - knowing the minimal set of user rights would be useful for others I think, Jon On Saturday, 20 February 2016 16:35:17 UTC, Julian Saunders wrote: > > Hello, > > I use Ansible to manage Linux hosts and just recently had a requirement to > manage Windows Servers. > > I have Ansible working against a Windows 2012 R2 host using an account > (test_user) that is part of the "administrators" group. > > I would like reduce the rights of test_user, so it is no longer in the > "administrators" group, but can still connect and copy files to its own > homedrive, and basically run commands that a user that is part of the > "Users" group can. > > On removing the user Ansible provives the following error: > > fatal: [servername] => 401 Unauthorized. basic auth failed > > > I did a bit of research and found the user needed to be part of the > "Remote Management Users", this would allow test_user to run Powershell > remotely. I tested this from another Windows host, and yes it works. > > > PS> $options=New-PSSessionOption -SkipCACheck -SkipCNCheck > PS> Enter-PSSession -ComputerName servername -Credential > servername\test_user -UseSSL -SessionOption $options > > > However via Ansible I get the following error: > > fatal: [servername] => failed to exec cmd PowerShell -NoProfile > -NonInteractive -EncodedCommand... > > > Does anyone know if it's possible to run Ansible against a Windows hosts > with a non admin user? > > Thanks. > > -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/06b1c684-aa5d-4a96-b923-8f8cb11c0ee2%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
