Individual activation

Semi-automatic deployment is suited for a very small amount of servers, for example, a central management server that provides an endpoint with multiple role definitions. This requires you to copy the role capabilities files as a module to your remote system with secure permissions set on those files. Additionally, the session configuration file should be available:

# Register an individual session configuration

# Prepare proper folder
$roleCapabilitiesFolder = New-Item -Path (Join-Path ($env:PSModulePath -split ';')[1] 'JeaCapabilitiesRoleCapabilities') -ItemType Directory -Force
$roleCapabilityOptions = @{
# shortened, see example code in Role Capabilities section
}

New-PSRoleCapabilityFile @roleCapabilityOptions

$sessionConfigurationOptions = @{
Path = '.SessionConfig.pssc'
SessionType = 'RestrictedRemoteServer'
TranscriptDirectory = 'C:Transcripts'
RunAsVirtualAccount = $true
LanguageMode = 'ConstrainedLanguage'
RoleDefinitions = @{
'contosoFirstLevelSupport' = @{RoleCapabilities = 'FirstLevelUserSupport'}
}
}

New-PSSessionConfigurationFile @sessionConfigurationOptions

# Register Configuration including a WinRM restart
Register-PSSessionConfiguration -Path .SessionConfig.pssc -Name SupportSession -Force
..................Content has been hidden....................

You can't read the all page of ebook, please click here login for view all page.
Reset