Microsoft Baseline Configuration Analyzer – Error – “The WinRM Client cannot complete the operation”

Background

Error message running “Microsoft Baseline Configuration Analyzer”.  The specific error message is “Microsoft Baseline Configuration Analyzer – Error – The WinRM Client cannot complete the operation within the time specified.  Check if the machine name is valid and is reachable over the network and firewall exception for Windows Remote Management Service is enabled”.

 

TroubleShooting

Netstat

Command


netstat -anb | find "SYN"

Output

syn_sent-cleaned

 

Explanation

We are looking for SYN_SENT entries and we found SYN_SENT entries bearing our destination IP Address.

 

WireShark

Installed WireShark and noticed the same thing.

Network Captured

Frame Messages – Body

wireshark-traffic-brushed-up

 

Frame Messages – Detail

wireshark-frame

 

 

Explanation

Noticed the same entries:

  1. TCP Retransmission … [SYN]

 

Microsoft Network Monitor

Network Traffic

framesummary

 

Explanation

  1. TCP:[SynReTransmit #162]
    • Same TCP:[SynReTransmit]
  2. Destination Port
    • 5985

 

Microsoft Documentation

The default WinRM port is 5985.

Installation and Configuration for Windows Remote Management
Link

      defaulthttpport

 

Resolution

Need to work with the Network\Firewall team and have them open up port 5985

Leave a Reply

Please log in using one of these methods to post your comment:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s