Files
cproudlock 62c0c7bb06 Initial commit: Organized PowerShell scripts for ShopDB asset collection
Structure:
- asset-collection/: Local PC data collection scripts
- remote-execution/: WinRM remote execution scripts
- setup-utilities/: Configuration and testing utilities
- registry-backup/: GE registry backup scripts
- winrm-https/: WinRM HTTPS certificate setup
- docs/: Complete documentation

Each folder includes a README with detailed documentation.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2025-12-10 10:57:54 -05:00

124 lines
4.3 KiB
Plaintext

================================================================================
START HERE - READ ME FIRST
================================================================================
WinRM HTTPS Deployment Package
================================================================================
WHAT IS THIS?
================================================================================
This folder contains everything needed to deploy WinRM HTTPS (secure PowerShell
remoting) to 175 shopfloor PCs.
================================================================================
QUICK START (3 STEPS)
================================================================================
STEP 1: Add Certificate
------------------------
>> See: COPY-CERTIFICATE-HERE.txt
Copy the certificate file to this folder:
wildcard-logon-ds-ge-com-20251017.pfx
STEP 2: Copy to Network Share
------------------------------
Copy this entire folder to a network share:
Example: \\SERVER\Shares\WinRM-HTTPS
Set permissions: Read access for "Domain Computers"
STEP 3: Deploy to PCs
---------------------
On each PC:
OPTION A - SECURE (Recommended for Production):
1. Navigate to: \\SERVER\Shares\WinRM-HTTPS
2. Right-click: Deploy-WinRM-HTTPS.bat
3. Select: "Run as Administrator"
4. Enter password when prompted
5. Wait for SUCCESS message
OPTION B - AUTO-PASSWORD (Testing Only):
1. Navigate to: \\SERVER\Shares\WinRM-HTTPS
2. Right-click: Deploy-WinRM-HTTPS-AutoPassword.bat
3. Select: "Run as Administrator"
4. No password prompt - runs automatically
5. Wait for SUCCESS message
WARNING: Password is hardcoded! Delete after testing!
================================================================================
IMPORTANT FILES
================================================================================
START WITH THESE:
0-START-HERE.txt <-- You are here
COPY-CERTIFICATE-HERE.txt <-- Add certificate first!
README-DEPLOYMENT.txt <-- Deployment instructions
CHECKLIST.txt <-- Track your progress
DEPLOYMENT FILES:
Deploy-WinRM-HTTPS.bat <-- Main deployment script
Test-WinRM-HTTPS.bat <-- Test script
Setup-WinRM-HTTPS.ps1 <-- PowerShell setup
Test-WinRM-HTTPS-Setup.ps1 <-- PowerShell test
DOCUMENTATION:
NETWORK_SHARE_DEPLOYMENT.md <-- Detailed guide
REQUIRED (Add manually):
wildcard-*.pfx <-- CERTIFICATE - MUST ADD!
================================================================================
CERTIFICATE PASSWORD
================================================================================
Password: XqHuyaLZSyCYEcpsMz6h5
Keep this secure! Store in password manager for production use.
================================================================================
BATCH EXECUTION POLICY
================================================================================
The batch files (.bat) automatically run PowerShell scripts with:
-ExecutionPolicy Bypass
This allows the scripts to run without requiring execution policy changes
on each PC. The scripts will run even if execution policy is Restricted.
================================================================================
SUPPORT
================================================================================
For help:
- Read: README-DEPLOYMENT.txt
- Read: NETWORK_SHARE_DEPLOYMENT.md
- Check parent folder for troubleshooting guides
================================================================================
DEPLOYMENT WORKFLOW
================================================================================
[ ] 1. Add certificate to this folder
[ ] 2. Copy folder to network share
[ ] 3. Test on 3-5 PCs
[ ] 4. Verify connections work
[ ] 5. Deploy to remaining PCs in batches
[ ] 6. Track progress in CHECKLIST.txt
[ ] 7. Verify all deployments
[ ] 8. Clean up (remove certificate from share)
================================================================================
READY TO START?
================================================================================
Next: Read COPY-CERTIFICATE-HERE.txt to add the certificate file.
================================================================================