Tallan's Technology Blog

Tallan's Top Technologists Share Their Thoughts on Today's Technology Challenges

Setting Up PSRemoting to Allow PowerShell Script Execution on SharePoint 2010 Server from FAST Search Server 2010

Overview

This post describes setting up PSRemoting to allow execution of PowerShell commands on your SharePoint 2010 Server instance from your FAST Search server instance.  These instructions should work however between any two machines on the same domain.

Setting Up PSRemoting

Enabling PSRemoting

First, PSRemoting needs to be enabled on both the FAST and SharePoint servers.  Launch a PowerShell session as Administrator on each machine, and run the following command:

Enable-PSRemoting

You will then be met with various prompts, asking you to approve execution of PowerShell commands to enable remoting.  Answer Y for each and hit Enter.

image

Enabling CredSSP Authentication on the Client (FAST)

The authentication type we will be using is called CredSSP.  This needs to be enabled as well on both the client and server machines.

On the FAST server (which will be our client), execute the following command:

Enable-WSManCredSSP –Role Client –DelegateComputer sharepointcomputer.mydomain.local

You will see the following dialog:

image

Select “Yes” and click “OK”.

If you are prompted any further in the console window, select Y and hit Enter

 

Enabling CredSSP Authentication on the Server (SharePoint)

 

On the SharePoint server, execute the following command:

Enable-WSManCredSSP –Role Server

You will be prompted as in the screenshot below.  Answer Y and hit Enter at the prompt(s).

image

Enabling Credential Delegation on Both Servers

The last step is to enable credential delegation on both the SharePoint and FAST servers.

Note: This step requires changes to the local security policy, which may be overwritten by domain group policies.  If your domain is using group policies, talk to your Active Directory administrator about setting up a group policy for these machines.

Launch the group policy editor by clicking the start menu and typing gpedit.msc.

Navigate to Computer Configuration –> Administrative Templates –> System –> Credentials Delegation.

image

In the right pane, double click “Allow Delegating Fresh Credentials”.

Select the Enabled radio button.  Click the Show button.

image

In the grid under Add servers to the list add a row starting with WSMAN/ and supply a server name or a wildcard mask for servers you wish to allow credential delegation with: (see below for example)

image

Click OK.  In the Allow Delegating Fresh Credentials dialog, click Apply.

You should now be able to execute PowerShell commands on the SharePoint server from your FAST Server

Executing Remote PowerShell Commands

Use the following script to execute remote PowerShell commands.

$credentials

= Get-Credential

$session = New-PSSession -Credential $credentials -Authentication CredSSP -ComputerName “mysharepointserver.mydomain.local”

Invoke-Command -Session $pauseSession -ScriptBlock {Add-PSSnapin Microsoft.SharePoint.Powershell}

Invoke-Command -Session $pauseSession -ScriptBlock {SCRIPT BLOCK HERE}

3 Comments. Leave new

Thank you for such a detailed explanation

[…] Tallan's Technology Blog Tallan's Top Technologists Share Their Thoughts on Today's Technology Challenges Skip to content HomeAbout « Setting Up PSRemoting to Allow PowerShell Script Execution on SharePoint 2010 Server from FA… […]

Has any one ever seen a strange flash on the screen right after the web site is starting?
For some reason this is nearly as if this wants me to get a seizure as soon as the web site is actually
loading. Most likely a problem with my desktop.

..

Leave a Reply

Your email address will not be published. Required fields are marked *

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <s> <strike> <strong>

\\\