Shut Down Remote Workgroup Computers
In today’s Ask the Admin, I will show you how to shut down a remote workgroup computer using PowerShell.
Say Goodbye to Traditional PC Lifecycle Management
Traditional IT tools, including Microsoft SCCM, Ghost Solution Suite, and KACE, often require considerable custom configurations by T3 technicians (an expensive and often elusive IT resource) to enable management of a hybrid onsite + remote workforce. In many cases, even with the best resources, organizations are finding that these on-premise tools simply cannot support remote endpoints consistently and reliably due to infrastructure limitations.
The easiest way to shut down remote Windows 10 devices in a workgroup is by using the PowerShell Stop-Computer cmdlet. This is for those that are not part of an Active Directory domain. Before you can use it, you will need to perform the following three steps on each remote device:
- Enable file and printer sharing.
- Enable remote administration firewall exceptions.
- Change UAC policy for remote administrators.
Enable File and Printer Sharing
Before you can run psshutdown against a remote machine, you will need to enable file and printer sharing on each remote device that you want to shut down. File and printer sharing is disabled by default on workgroup devices. The quickest way to achieve this is by using the command prompt. You will need to open a PowerShell prompt with administrative privileges and run the command below:
netsh advfirewall firewall set rule group="File and Printer Sharing" new enable=yes
Enable Remote Administration
Stop-Computer uses Windows Management Instrumentation (WMI) and requires some firewall ports to be open on each remote device. The following command is deprecated but it still works. It seems to be the only easy way to enable the necessary firewall exceptions for remote administration on a workgroup Windows 10 device.
netsh firewall set service type=remoteadmin mode=enable
Change UAC Policy
UAC strips administrator accounts, which connect remotely, of their admin privileges by default. Keep in mind these connect remotely. You can change this behavior by adding the LocalAccountTokenFilterPolicy value to the registry and setting it to true.
$registryPath = "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" $Name = "LocalAccountTokenFilterPolicy" $value = "1" New-ItemProperty -Path $registryPath -Name $name -Value $value -PropertyType DWORD
Shut Down a Remote Computer
Once the above prerequisites are in place, start a PowerShell prompt on your management workstation. Run the Stop-Computer cmdlet as shown below and set the -Computer parameter to the name of the remote device you want to shut down. Set -Credential to the name of a user account on the remote device that has local administrative privileges or the right to shut down the computer.
Stop-Computer -Computer desktop-qghidoo -Force -Credential "russell smith"
You can shut down more than one device at a time by specifying multiple computers in the -Computer parameter.
In this Ask the Admin, I showed you how to shut down remote Windows 10 workgroup devices using PowerShell.