Hello,
I'm facing a problem today with two of my servers that are not in domain. The password and the username of the local user we are using is OK. Attach are the setting of event sources i have configured. 
winrmconfig.ps1 powershell script is configured successfully and the listener is up:
The error is the following:
Error! 401/Unauthorized.
Possible causes:
- Invalid credentials.
Please any help ?
Thank You
The command should be execute via cmd or powershell ?
I have invalid command
You can run it on PS as the following
PS C:\Users\Administrator.2K8R2-DC> winrm set winrm/config/service/auth '@{Basic="true"}'
Auth
Basic = true
Kerberos = true
Negotiate = true
Certificate = false
CredSSP = false
CbtHardeningLevel = Relaxed
PS C:\Users\Administrator.2K8R2-DC>
Great . It worked on one of the servers
But in the other not
The output is the same:
Basic = true
Kerberos = true
Negotiate = true
Certificate = false
CredSSP = false
CbtHardeningLevel = Relaxed
Maybe i need to follow this steps : 000032671 - RSA Security Analytics - 401/Unauthorized error while integrating Windows Server 2008 Machine ?
Hi,
after using this command :
winrm set winrm/config/service/auth '@{Basic="true"}'
run again the PS:
Powershell -command “c:\temp\winrmconfig.ps1 -Action enable -User mycollectionuser@mydomain.com” it will solve the issue after
Thank You for your replay. I tried the command with no error but still i have
You may also try this from a PowerShell (remember to run PowerShell as administrator)
winrm set winrm/config/service '@{AllowUnencrypted="true"}'
(since you are using both HTTP and Basic)
open powershell (administrator) and run the below command where the action is "report" (not enable) and provide us with the output please.
Powershell -command “c:\temp\winrmconfig.ps1 -Action report -User mycollectionuser@mydomain.com”
also are you trying to add the source by name or IP? are you able to ping and curl the event source IP on port 80 and 5985 from the log collector?
Hello Ornaldo,
Kindly run the following command on the Windows Machine and try again the test connection.
winrm set winrm/config/service/auth '@{Basic="true"}'