I managed to find the root/CIMV2 namespace, and I set the security permissions of "Execute Methods" and "Remote Enable" and restarted the WMI and WinRM services. Unfortunately I still receive the same error.
As I mentioned, I can use WinRM from another Windows server via Powershell session, without having to have an admin account. Once I have connected I'm able to run cmd or ipconfig. I wonder what Ansible is doing? On Monday, 22 February 2016 10:31:33 UTC, J Hawkesworth wrote: > > From here it looks like this is possible, although you would have to tweak > user rights: > > > https://social.technet.microsoft.com/Forums/scriptcenter/en-US/60de5fcd-33e0-479b-9668-fcf683678a2f/winrm-for-nonadministrative-users?forum=ITCG > > I get the impression that the intention for WinRM is for admistrative > access, however. Have a look at the first paragraph of this page: > https://msdn.microsoft.com/en-us/library/windows/desktop/aa384295(v=vs.85).aspx > > Hope this helps. > > Please report back if you are able to get this working - knowing the > minimal set of user rights would be useful for others I think, > > Jon > > On Saturday, 20 February 2016 16:35:17 UTC, Julian Saunders wrote: >> >> Hello, >> >> I use Ansible to manage Linux hosts and just recently had a requirement >> to manage Windows Servers. >> >> I have Ansible working against a Windows 2012 R2 host using an account >> (test_user) that is part of the "administrators" group. >> >> I would like reduce the rights of test_user, so it is no longer in the >> "administrators" group, but can still connect and copy files to its own >> homedrive, and basically run commands that a user that is part of the >> "Users" group can. >> >> On removing the user Ansible provives the following error: >> >> fatal: [servername] => 401 Unauthorized. basic auth failed >> >> >> I did a bit of research and found the user needed to be part of the >> "Remote Management Users", this would allow test_user to run Powershell >> remotely. I tested this from another Windows host, and yes it works. >> >> >> PS> $options=New-PSSessionOption -SkipCACheck -SkipCNCheck >> PS> Enter-PSSession -ComputerName servername -Credential >> servername\test_user -UseSSL -SessionOption $options >> >> >> However via Ansible I get the following error: >> >> fatal: [servername] => failed to exec cmd PowerShell -NoProfile >> -NonInteractive -EncodedCommand... >> >> >> Does anyone know if it's possible to run Ansible against a Windows hosts >> with a non admin user? >> >> Thanks. >> >> -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to ansible-project+unsubscr...@googlegroups.com. To post to this group, send email to ansible-project@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/1e2b5fa8-1e8a-4fa8-bc34-db8d5f7e1a76%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
