Microsoft Knowledge Base Email Alertz

WinRM Operations over HTTPS fail with Access Denied for some systems

Search KbAlertz

Advanced Search

Receive Microsoft Knowledge Base articles by E-Mail?

Every night we scan the Microsoft Knowledge Base. If technologies you're interested in are updated, we'll send you an e-mail. You only get one e-mail a day, and only when new articles are added.

Click here to create a
FREE account
Already have an account?
[Click here to Login]











Microsoft Knowledge Base Article

This article contents is Microsoft Copyrighted material.
©2005-©2007 Microsoft Corporation. All rights reserved. Terms of Use | Trademarks

Article ID: 2402960 - Last Review: September 3, 2010 - Revision: 1.0

WinRM Operations over HTTPS fail with Access Denied for some systems

SYMPTOMS

You are unable to perform some tasks that use WinRM when using HTTPS.  The attempt returns an access denied.  The same tasks succeed when using HTTP.

An example of such a task is using the “new-pssession” Powershell cmdlet. The symptom is not limited to this Powershell example as the underlying issue could manifest for any operation attempting to use WinRM over HTTPS.

CAUSE

The issue in this scenario may occur if Microsoft security bulletin MS09-059 (http://www.microsoft.com/technet/security/Bulletin/MS09-059.mspx) is applied to a system that does not also have Microsoft KB968389 (http://kbalertz.com/Feedback.aspx?kbNumber=968389) installed.

RESOLUTION

Ensure that both KB968389 and MS09-059 are installed on the affected system.

MORE INFORMATION

975467 - MS09-059: Vulnerability in the Local Security Authority Subsystem Service could allow denial of service
http://kbalertz.com/975467 (http://support.microsoft.com/default.aspx?scid=kb;en-us;975467)

968389 - Extended Protection for Authentication
http://kbalertz.com/968389 (http://support.microsoft.com/default.aspx?scid=kb;en-us;968389)
Note This is a "FAST PUBLISH" article created directly from within the Microsoft support organization. The information contained herein is provided as-is in response to emerging issues. As a result of the speed in making it available, the materials may include typographical errors and may be revised at any time without notice. See Terms of Use (http://go.microsoft.com/fwlink/?LinkId=151500) for other considerations.

APPLIES TO
  • Windows Server 2008 Datacenter without Hyper-V
  • Windows Server 2008 Enterprise without Hyper-V
  • Windows Server 2008 for Itanium-Based Systems
  • Windows Server 2008 Service Pack 2
  • Windows Server 2008 Standard without Hyper-V
  • Windows Server 2008 Datacenter
  • Windows Server 2008 Enterprise
  • Windows Server 2008 Standard
  • Microsoft Windows Server 2003 Service Pack 2
  • Microsoft Windows Server 2003 R2 Standard Edition (32-bit x86)
  • Microsoft Windows Server 2003 R2 Standard x64 Edition
  • Windows Vista Enterprise 64-bit Edition
  • Windows Vista Home Basic 64-bit Edition
  • Windows Vista Home Premium 64-bit Edition
  • Windows Vista Ultimate 64-bit Edition
  • Windows Vista Business
  • Windows Vista Business 64-bit Edition
  • Windows Vista Enterprise
  • Windows Vista Home Basic
  • Windows Vista Home Premium
  • Windows Vista Service Pack 1
  • Windows Vista Service Pack 2
  • Windows Vista Starter
  • Windows Vista Ultimate
Keywords: 
KB2402960
       

Community Feedback System

Very often, it takes hours to solve a problem. Very often, you've looked high and low, and have tried a lot of solutions. When you finally found it, chances are, it was because someone else helped you. Here's your chance to give back. Use our community feedback tool to let others know what worked for you and what didn't.

Please also understand that the community feedback system is not warranted to be correct, it's simply a system that we've built to let people try and help each other. If something in a feedback response doesn't make sense to you, or you're not comfortable making changes that the feedback talks about (like registry edits), please consult a professional.

Thank you for using kbAlertz.com Feedback System.

-- Scott Cate