What permission is needed to use a service account to remote run powershell on a server?

Question

I have a internal webapplication With a list of all the servers in our network. I want to be able to run a few PowerShell commands on the servers to gather usefull information. Invoke-WMIMethod and Invoke-Command. I only need permissions to read from the servers. This Works good on the servers I have local admin on, but it's not an alternative to make a service account that is local admin on all the servers.

So how do I set up the right permissions on the service account used on IIS Application pool to get read only remote access that will make me able to run these PowerShell commands?

Answer 1

I would start by taking a look at this MSDN article:

• Authorize WMI users and set permissions

Specifically, there is the following permission you can assign to a user:

• Execute Methods - Allows a user to execute WMI class methods.