Overview
The PSSessionSettings command enumerates PowerShell remoting (PSRemoting/WinRM) configuration settings from the registry. This reveals whether PowerShell remoting is enabled, listener configurations, authentication settings, and security controls affecting remote PowerShell access.Syntax
Remote Execution
Output
Returns PowerShell remoting configuration:- PowerShell remoting enabled/disabled status
- WinRM service configuration
- Listener configurations
- Authentication methods
- Session configurations
- MaxShellsPerUser and quota settings
Use Cases
- Red Team
- Blue Team
- Determine if PowerShell remoting is available
- Identify authentication methods
- Plan lateral movement via PSRemoting
- Assess remote access controls
- Identify session configuration restrictions
Example Output
Remote Execution
This command supports remote execution using the
-computername parameter.Detection Considerations
Low detection risk - reads WinRM registry configuration.
Related Commands
- PowerShell - PowerShell versions and security
- NetworkShares - Network shares
- WindowsFirewall - Firewall rules
- Services - Windows services