| external help file | keywords | locale | Module Name | ms.date | online version | schema | title |
|---|---|---|---|---|---|---|---|
System.Management.Automation.dll-Help.xml |
powershell,cmdlet |
en-us |
Microsoft.PowerShell.Core |
03/26/2019 |
2.0.0 |
Enable-PSSessionConfiguration |
Enables the session configurations on the local computer.
Enable-PSSessionConfiguration [[-Name] <String[]>] [-Force] [-SecurityDescriptorSddl <String>]
[-SkipNetworkProfileCheck] [-NoServiceRestart] [-WhatIf] [-Confirm] [<CommonParameters>]
The Enable-PSSessionConfiguration cmdlet enables registered session configurations that have been
disabled, such as by using the Disable-PSSessionConfiguration or Disable-PSRemoting cmdlets, or
the AccessMode parameter of Register-PSSessionConfiguration. This is an advanced cmdlet that
is designed to be used by system administrators to manage customized session configurations for
their users.
Without parameters, Enable-PSSessionConfiguration enables the Microsoft.PowerShell
configuration, which is the default configuration that is used for sessions.
Enable-PSSessionConfiguration removes the Deny_All setting from the security descriptor of the
affected session configurations, turns on the listener that accepts requests on any IP address, and
restarts the WinRM service. Beginning in PowerShell 3.0, Enable-PSSessionConfiguration
also sets the value of the Enabled property of the session configuration
(WSMan:\<computer>\PlugIn\<SessionConfigurationName>\Enabled) to True. However,
Enable-PSSessionConfiguration does not remove or change the Network_Deny_All
(AccessMode=Local) security descriptor setting that allows only users of the local computer to use
to the session configuration.
This example re-enables the Microsoft.PowerShell default session configuration on the computer.
Enable-PSSessionConfigurationThis example re-enables the MaintenanceShell and AdminShell session configurations on the computer.
Enable-PSSessionConfiguration -Name MaintenanceShell, AdminShellThis example re-enables all session configurations on the computer. These commands are equivalent. Therefore, you can use either.
Enable-PSSessionConfiguration -Name *
Get-PSSessionConfiguration | Enable-PSSessionConfigurationEnable-PSSessionConfiguration does not generate an error if you enable a session configuration
that is already enabled.
This example re-enables the MaintenanceShell session configuration and specifies a new security descriptor for the configuration.
$sddl = "O:NSG:BAD:P(A;;GXGWGR;;;BA)(A;;GAGR;;;S-1-5-21-123456789-188441444-3100496)S:P"
Enable-PSSessionConfiguration -Name MaintenanceShell -SecurityDescriptorSDDL $sddlIndicates that the cmdlet does not prompt you for confirmation, and restarts the WinRM service without prompting. Restarting the service makes the configuration change effective.
To prevent a restart and suppress the restart prompt, use the NoServiceRestart parameter.
Type: SwitchParameter
Parameter Sets: (All)
Aliases:
Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: FalseSpecifies the names of session configurations to enable. Enter one or more configuration names. Wildcard characters are permitted.
You can also pipe a string that contains a configuration name or a session configuration object to
Enable-PSSessionConfiguration.
If you omit this parameter, Enable-PSSessionConfiguration enables the Microsoft.PowerShell
session configuration.
Type: String[]
Parameter Sets: (All)
Aliases:
Required: False
Position: 0
Default value: None
Accept pipeline input: True (ByPropertyName, ByValue)
Accept wildcard characters: FalseIndicates that the cmdlet does not restart the service.
Type: SwitchParameter
Parameter Sets: (All)
Aliases:
Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: FalseSpecifies a security descriptor with which this cmdlet replaces the security descriptor on the session configuration.
If you omit this parameter, Enable-PSSessionConfiguration only deletes the deny all item from the
security descriptor.
Type: String
Parameter Sets: (All)
Aliases:
Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: FalseIndicates that this cmdlet enables the session configuration when the computer is on a public
network. This parameter enables a firewall rule for public networks that allows remote access only
from computers in the same local subnet. By default, Enable-PSSessionConfiguration fails on a
public network.
This parameter is designed for client versions of the Windows operating system. Server versions of the Windows operating system have a local subnet firewall rule for public networks. However, if the local subnet firewall rule is disabled on a server version of the Windows operating system, this parameter re-enables it.
To remove the local subnet restriction and enable remote access from all locations on public
networks, use the Set-NetFirewallRule cmdlet in the NetSecurity module. For more information, see
Enable-PSRemoting.
This parameter was introduced in PowerShell 3.0.
Type: SwitchParameter
Parameter Sets: (All)
Aliases:
Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: FalsePrompts you for confirmation before running the cmdlet.
Type: SwitchParameter
Parameter Sets: (All)
Aliases: cf
Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: FalseShows what would happen if the cmdlet runs. The cmdlet is not run.
Type: SwitchParameter
Parameter Sets: (All)
Aliases: wi
Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: FalseThis cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.
You can pipe a session configuration object or a string that contains the name of a session configuration to this cmdlet.
This cmdlet does not return any objects.
To use this cmdlet, you must start PowerShell by using the Run as administrator option.
Disable-PSSessionConfiguration
New-PSSessionConfigurationFile
Register-PSSessionConfiguration
Test-PSSessionConfigurationFile