{"id":956,"date":"2026-09-26T16:20:32","date_gmt":"2026-09-26T16:20:32","guid":{"rendered":"https:\/\/www.vps.tc\/blog\/?p=956"},"modified":"2026-09-26T09:41:09","modified_gmt":"2026-09-26T09:41:09","slug":"winrm-nedir-windows-sunucularda-uzaktan-yonetim","status":"publish","type":"post","link":"https:\/\/www.vps.tc\/blog\/tr\/winrm-nedir-windows-sunucularda-uzaktan-yonetim\/","title":{"rendered":"WinRM Nedir? Windows Sunucularda Uzaktan Y\u00f6netim"},"content":{"rendered":"<div class=\"aiw-summary\" id=\"aiw-ozet\">\n<p class=\"aiw-summary-title\">H\u0131zl\u0131 \u00d6zet &#8211; WinRM Uzaktan Y\u00f6netim<\/p>\n<p>WinRM, Windows sunucularda PowerShell tabanl\u0131 uzaktan y\u00f6netim sa\u011flayan WS-Management hizmetidir. Port, kimlik do\u011frulama ve a\u011f k\u0131s\u0131tlamas\u0131 birlikte yap\u0131land\u0131r\u0131lmal\u0131d\u0131r.<\/p>\n<ul>\n<li><strong>Temel g\u00f6rev<\/strong> \u2014 Uzak Windows makinelerde PowerShell komutlar\u0131, servis kontrolleri ve y\u00f6netim i\u015flemleri \u00e7al\u0131\u015ft\u0131r\u0131r.<\/li>\n<li><strong>Varsay\u0131lan portlar<\/strong> \u2014 HTTP i\u00e7in 5985\/TCP, HTTPS i\u00e7in 5986\/TCP kullan\u0131l\u0131r.<\/li>\n<li><strong>Ba\u011flant\u0131 testi<\/strong> \u2014 Test-WSMan, hedefte WS-Management yan\u0131t\u0131n\u0131n al\u0131n\u0131p al\u0131nmad\u0131\u011f\u0131n\u0131 kontrol eder.<\/li>\n<li><strong>Kimlik do\u011frulama<\/strong> \u2014 Etki alanlar\u0131nda Kerberos, uygun \u00e7al\u0131\u015fma grubu senaryolar\u0131nda NTLM veya HTTPS kullan\u0131labilir.<\/li>\n<li><strong>G\u00fcvenlik<\/strong> \u2014 WinRM portlar\u0131n\u0131 internete herkese a\u00e7\u0131k b\u0131rakmak yerine VPN veya kaynak IP k\u0131s\u0131tlamas\u0131 uygulay\u0131n.<\/li>\n<li><strong>Otomasyon<\/strong> \u2014 Ansible ve PowerShell Remoting, Windows sunucu y\u00f6netimini tekrarlanabilir h\u00e2le getirir.<\/li>\n<\/ul>\n<\/div>\n<p class=\"aiw-lead\">WinRM, Windows sunucular\u0131 grafik masa\u00fcst\u00fc a\u00e7madan uzaktan y\u00f6netmeye yarayan Microsoft WS-Management hizmetidir. PowerShell Remoting bu kanal \u00fczerinden komut \u00e7al\u0131\u015ft\u0131r\u0131r; varsay\u0131lan portlar HTTP i\u00e7in 5985, HTTPS i\u00e7in 5986&#039;d\u0131r. G\u00fcvenli kullan\u0131m i\u00e7in kimlik do\u011frulama, firewall ve eri\u015fim kaynaklar\u0131 birlikte yap\u0131land\u0131r\u0131lmal\u0131d\u0131r.<\/p>\n<div class=\"aiw-toc\" style=\"border:1px solid #dbe3ea;border-radius:8px;padding:16px 20px;margin:0 0 28px\">\n<p class=\"aiw-toc-head\"><strong>\u0130\u00e7indekiler<\/strong><span class=\"aiw-toc-meta\"> \u00b7 8 dk okuma<\/span><\/p>\n<ol style=\"margin:10px 0 0;padding-left:22px\">\n<li><a href=\"#winrm-nedir-ve-ne-ise-yarar\">WinRM nedir ve ne i\u015fe yarar?<\/a><\/li>\n<li><a href=\"#winrm-hangi-portu-kullanir\">WinRM hangi portu kullan\u0131r?<\/a><\/li>\n<li><a href=\"#winrm-nasil-etkinlestirilir\">WinRM nas\u0131l etkinle\u015ftirilir?<\/a><\/li>\n<li><a href=\"#uzak-powershell-baglantisi-nasil-yapilir\">Uzak PowerShell ba\u011flant\u0131s\u0131 nas\u0131l yap\u0131l\u0131r?<\/a><\/li>\n<li><a href=\"#test-wsman-neyi-kontrol-eder\">Test-WSMan neyi kontrol eder?<\/a><\/li>\n<li><a href=\"#winrmde-kimlik-dogrulama-secenekleri-nelerdir\">WinRM&#039;de kimlik do\u011frulama se\u00e7enekleri nelerdir?<\/a><\/li>\n<li><a href=\"#winrm-guvenligi-nasil-artirilir\">WinRM g\u00fcvenli\u011fi nas\u0131l art\u0131r\u0131l\u0131r?<\/a><\/li>\n<li><a href=\"#winrm-ile-ansible-nasil-birlikte-calisir\">WinRM ile Ansible nas\u0131l birlikte \u00e7al\u0131\u015f\u0131r?<\/a><\/li>\n<li><a href=\"#winrm-rdp-ve-ssh-arasindaki-fark\">WinRM, RDP ve SSH aras\u0131ndaki fark<\/a><\/li>\n<li><a href=\"#winrm-yapilandirmasini-kontrol-edin\">WinRM Yap\u0131land\u0131rmas\u0131n\u0131 Kontrol Edin<\/a><\/li>\n<li><a href=\"#sik-sorulan-sorular\">S\u0131k Sorulan Sorular<\/a><\/li>\n<li><a href=\"#kaynaklar\">Kaynaklar<\/a><\/li>\n<\/ol>\n<\/div>\n<h2 id=\"winrm-nedir-ve-ne-ise-yarar\">WinRM nedir ve ne i\u015fe yarar?<\/h2>\n<p>WinRM, Windows Remote Management&#8217;\u0131n k\u0131saltmas\u0131d\u0131r. Windows sunucular\u0131n a\u011f \u00fczerinden PowerShell ve WS-Management protokol\u00fcyle uzaktan y\u00f6netilmesini sa\u011flar. Uzak makinede komut \u00e7al\u0131\u015ft\u0131rabilir, servisleri inceleyebilir, olay g\u00fcnl\u00fcklerini okuyabilir ve baz\u0131 y\u00f6netim g\u00f6revlerini grafik aray\u00fcz a\u00e7madan ger\u00e7ekle\u015ftirebilirsiniz.<\/p>\n<p>WinRM, RDP&#8217;nin sundu\u011fu masa\u00fcst\u00fc oturumu yerine komut ve y\u00f6netim kanal\u0131 sa\u011flar. Microsoft&#8217;un WS-Management uygulamas\u0131d\u0131r ve SOAP tabanl\u0131 ileti\u015fim kullan\u0131r. Windows Server&#8217;da Windows Remote Management hizmetiyle \u00e7al\u0131\u015f\u0131r.<\/p>\n<p>Varsay\u0131lan HTTP portu <code>5985\/TCP<\/code>, HTTPS portu ise <code>5986\/TCP<\/code>&#8216;dir. HTTP kullan\u0131m\u0131 tek ba\u015f\u0131na TLS \u015fifrelemesi sa\u011flamaz; g\u00fcvenlik, Kerberos gibi kimlik do\u011frulama mekanizmalar\u0131na ve a\u011f\u0131n g\u00fcvenilirli\u011fine ba\u011fl\u0131d\u0131r. HTTPS ise trafi\u011fi TLS ile korur.<\/p>\n<p>\u00d6zellikle Server Core kurulumlar\u0131nda WinRM temel y\u00f6netim kanallar\u0131ndan biridir. GUI&#8217;siz sistem y\u00f6netimiyle ilgileniyorsan\u0131z <a href=\"https:\/\/www.vps.tc\/blog\/tr\/windows-server-core-nedir-guisiz-yonetim-rehberi\/\">Windows Server Core Nedir? GUI&#8217;siz Y\u00f6netim Rehberi<\/a> ba\u015fl\u0131\u011f\u0131ndaki yakla\u015f\u0131m, WinRM ile birlikte anlam kazan\u0131r.<\/p>\n<p><strong>Ne yap\u0131lmal\u0131<\/strong> &#8211; WinRM&#8217;yi etkinle\u015ftirmeden \u00f6nce kimlik do\u011frulama y\u00f6ntemini, kullan\u0131lacak portu ve izin verilecek kaynak IP aral\u0131\u011f\u0131n\u0131 belirleyin.<\/p>\n<h2 id=\"winrm-hangi-portu-kullanir\">WinRM hangi portu kullan\u0131r?<\/h2>\n<p>WinRM iki standart dinleme noktas\u0131 kullan\u0131r:<\/p>\n<table>\n<thead>\n<tr>\n<th>Protokol<\/th>\n<th>Varsay\u0131lan port<\/th>\n<th>\u015eifreleme<\/th>\n<th>Tipik kullan\u0131m<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>HTTP<\/td>\n<td>5985\/TCP<\/td>\n<td>Trafik TLS ile \u015fifrelenmez<\/td>\n<td>Kerberos kullan\u0131lan etki alan\u0131 i\u00e7i a\u011flar<\/td>\n<\/tr>\n<tr>\n<td>HTTPS<\/td>\n<td>5986\/TCP<\/td>\n<td>TLS sertifikas\u0131yla \u015fifrelenir<\/td>\n<td>Etki alan\u0131 d\u0131\u015f\u0131 veya g\u00fcvenilmeyen a\u011flar<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>Portlar\u0131n a\u00e7\u0131k olmas\u0131 ba\u011flant\u0131n\u0131n kesin olarak \u00e7al\u0131\u015faca\u011f\u0131 anlam\u0131na gelmez. WinRM hizmeti, listener yap\u0131land\u0131rmas\u0131, Windows Firewall profili, kimlik do\u011frulama y\u00f6ntemi ve hedef bilgisayar\u0131n g\u00fcvenilirlik ayarlar\u0131 birlikte kontrol edilmelidir.<\/p>\n<p>\u0130nternete a\u00e7\u0131k bir VPS \u00fczerinde <code>5985\/TCP<\/code> portunu t\u00fcm adreslere a\u00e7mak, y\u00f6netim y\u00fczeyini gereksiz bi\u00e7imde b\u00fcy\u00fct\u00fcr. G\u00fcvenlik duvar\u0131nda yaln\u0131zca y\u00f6netim a\u011f\u0131na veya belirlenmi\u015f y\u00f6netici IP&#8217;lerine izin verin.<\/p>\n<p><strong>Ne yap\u0131lmal\u0131<\/strong> &#8211; 5985 veya 5986 portunu genel internete a\u00e7mak yerine VPN, \u00f6zel a\u011f ya da dar bir kaynak IP listesi kullan\u0131n.<\/p>\n<div class=\"aiw-callout aiw-callout-tip\">\n<p class=\"aiw-callout-label\">\u0130pucu<\/p>\n<p>\u0130pucu: \u0130lk ba\u011flant\u0131 denemesinden \u00f6nce Test-WSMan -ComputerName sunucu-ad\u0131 \u00e7al\u0131\u015ft\u0131r\u0131n. Bu k\u00fc\u00e7\u00fck test, PowerShell komutunun yetkisini de\u011fil WinRM ileti\u015fim katman\u0131n\u0131n yan\u0131t\u0131n\u0131 kontrol eder.<\/p>\n<\/div>\n<h2 id=\"winrm-nasil-etkinlestirilir\">WinRM nas\u0131l etkinle\u015ftirilir?<\/h2>\n<p>Y\u00f6netici yetkili PowerShell oturumunda <code>Enable-PSRemoting -Force<\/code> komutu WinRM ve PowerShell Remoting yap\u0131land\u0131rmas\u0131n\u0131 etkinle\u015ftirir. Komut, hizmeti ba\u015flat\u0131r, listener olu\u015fturur ve uygun Windows Firewall kurallar\u0131n\u0131 etkinle\u015ftirir. <code>winrm quickconfig<\/code> da temel WinRM yap\u0131land\u0131rmas\u0131 i\u00e7in kullan\u0131labilir.<\/p>\n<pre><code>Enable-PSRemoting -Force\n\nwinrm enumerate winrm\/config\/listener<\/code><\/pre>\n<p>\u0130kinci komut listener kay\u0131tlar\u0131n\u0131 listeler. \u00c7\u0131kt\u0131da <code>Transport = HTTP<\/code> ve <code>Port = 5985<\/code> gibi de\u011ferler g\u00f6r\u00fcl\u00fcr. \u00c7\u0131kt\u0131 gelmiyorsa servis veya listener yap\u0131land\u0131rmas\u0131 tamamlanmam\u0131\u015f olabilir.<\/p>\n<p>Servis durumunu ayr\u0131ca do\u011frulay\u0131n:<\/p>\n<pre><code>Get-Service WinRM\nGet-WSManInstance -ResourceURI winrm\/config\/listener -Enumerate<\/code><\/pre>\n<p><code>WinRM<\/code> servisinin <code>Running<\/code> durumda olmas\u0131 gerekir. Listener&#8217;\u0131n <code>Address = *<\/code> olarak g\u00f6r\u00fcnmesi, makinenin t\u00fcm yerel adreslerinde dinleme yapabilece\u011fi anlam\u0131na gelir. \u00c7oklu a\u011f kart\u0131 bulunan sunucularda bu davran\u0131\u015f\u0131n ger\u00e7ekten istenip istenmedi\u011fini kontrol edin.<\/p>\n<p><strong>Ne yap\u0131lmal\u0131<\/strong> &#8211; Kurulumdan sonra hem <code>Get-Service WinRM<\/code> \u00e7\u0131kt\u0131s\u0131n\u0131 hem de listener adresi, transport ve port de\u011ferlerini inceleyin.<\/p>\n<h2 id=\"uzak-powershell-baglantisi-nasil-yapilir\">Uzak PowerShell ba\u011flant\u0131s\u0131 nas\u0131l yap\u0131l\u0131r?<\/h2>\n<p>Tek bir komut \u00e7al\u0131\u015ft\u0131rmak i\u00e7in <code>Invoke-Command<\/code> kullan\u0131labilir:<\/p>\n<pre><code>Invoke-Command -ComputerName SRV01 -ScriptBlock {\n    Get-Service WinRM\n}<\/code><\/pre>\n<p>Bu komut <code>SRV01<\/code> \u00fczerinde \u00e7al\u0131\u015f\u0131r ve uzak makinedeki WinRM servisinin durumunu d\u00f6nd\u00fcr\u00fcr. Birden fazla sunucuda ayn\u0131 kontrol yap\u0131lacaksa bilgisayar adlar\u0131n\u0131 dizi olarak g\u00f6nderebilirsiniz:<\/p>\n<pre><code>$servers = 'SRV01','SRV02','SRV03'\nInvoke-Command -ComputerName $servers -ScriptBlock {\n    [pscustomobject]@{\n        ComputerName = $env:COMPUTERNAME\n        WinRM        = (Get-Service WinRM).Status\n        FreeGB       = [math]::Round((Get-PSDrive C).Free \/ 1GB, 2)\n    }\n}<\/code><\/pre>\n<p>Kimlik bilgilerini a\u00e7\u0131k\u00e7a belirtmek gerekti\u011finde <code>Get-Credential<\/code> kullan\u0131labilir:<\/p>\n<pre><code>$credential = Get-Credential\nEnter-PSSession -ComputerName SRV01 -Credential $credential<\/code><\/pre>\n<p><code>Enter-PSSession<\/code> etkile\u015fimli bir uzak kabuk a\u00e7ar. Oturumu kapatmak i\u00e7in <code>Exit-PSSession<\/code> \u00e7al\u0131\u015ft\u0131r\u0131l\u0131r. Toplu i\u015fler ve servis kontrolleri i\u00e7in <code>Invoke-Command<\/code>, k\u0131sa s\u00fcreli manuel inceleme i\u00e7in <code>Enter-PSSession<\/code> daha uygundur.<\/p>\n<p><strong>Ne yap\u0131lmal\u0131<\/strong> &#8211; \u00d6nce <code>Test-WSMan<\/code> ile ileti\u015fim katman\u0131n\u0131 do\u011frulay\u0131n, ard\u0131ndan uzak komut \u00e7al\u0131\u015ft\u0131r\u0131n.<\/p>\n<h2 id=\"test-wsman-neyi-kontrol-eder\">Test-WSMan neyi kontrol eder?<\/h2>\n<p><code>Test-WSMan<\/code>, hedefte WS-Management hizmetinin yan\u0131t verip vermedi\u011fini test eder. Bu komut uygulama i\u00e7indeki yetkileri veya belirli bir PowerShell komutunun \u00e7al\u0131\u015faca\u011f\u0131n\u0131 kan\u0131tlamaz. A\u011f eri\u015fimi, WinRM listener&#8217;\u0131 ve protokol yan\u0131t\u0131 hakk\u0131nda h\u0131zl\u0131 bir ilk kontrol sunar.<\/p>\n<pre><code>Test-WSMan -ComputerName SRV01<\/code><\/pre>\n<p>Ba\u015far\u0131l\u0131 yan\u0131tta protokol s\u00fcr\u00fcm\u00fc ve \u00fcr\u00fcn bilgileri g\u00f6r\u00fcn\u00fcr. <code>WinRM cannot complete the operation<\/code> hatas\u0131 al\u0131nd\u0131\u011f\u0131nda DNS \u00e7\u00f6z\u00fcmlemesini, 5985 veya 5986 portuna eri\u015fimi, WinRM servis durumunu, listener&#8217;\u0131 ve Windows Firewall kural\u0131n\u0131 s\u0131rayla inceleyin.<\/p>\n<pre><code>Resolve-DnsName SRV01\nTest-NetConnection SRV01 -Port 5985\nGet-NetFirewallRule -DisplayGroup 'Windows Remote Management'<\/code><\/pre>\n<p><code>Test-NetConnection<\/code> ba\u015far\u0131l\u0131 olsa bile kimlik do\u011frulama hatas\u0131 devam edebilir. B\u00f6yle bir durumda sorun a\u011f katman\u0131nda de\u011fil; yetki, g\u00fcvenilir ana bilgisayar veya Kerberos yap\u0131land\u0131rmas\u0131nda aranmal\u0131d\u0131r.<\/p>\n<h2 id=\"winrmde-kimlik-dogrulama-secenekleri-nelerdir\">WinRM&#8217;de kimlik do\u011frulama se\u00e7enekleri nelerdir?<\/h2>\n<p>Etki alan\u0131 ortamlar\u0131nda Kerberos genellikle tercih edilen y\u00f6ntemdir. Hedefe bilgisayar ad\u0131yla ba\u011flan\u0131ld\u0131\u011f\u0131nda Active Directory kimlik do\u011frulamas\u0131 devreye girebilir. NTLM, baz\u0131 etki alan\u0131 d\u0131\u015f\u0131 senaryolarda kullan\u0131labilir; yap\u0131land\u0131rma ve g\u00fcvenlik s\u0131n\u0131rlar\u0131 yine de dikkatle de\u011ferlendirilmelidir.<\/p>\n<p>\u00c7al\u0131\u015fma grubu ortamlar\u0131nda hedef makinenin g\u00fcvenilir ana bilgisayar listesine eklenmesi gerekebilir:<\/p>\n<pre><code>Set-Item WSMan:\\Client\\TrustedHosts -Value '192.0.2.10' -Concatenate<\/code><\/pre>\n<p><code>TrustedHosts<\/code> de\u011ferini <code>*<\/code> yapmak her hedefi g\u00fcvenilir kabul eder. \u00dcretim ortam\u0131nda k\u00f6t\u00fc bir varsay\u0131land\u0131r. Gerekirse tek bir IP adresi veya dar bir DNS listesi kullan\u0131n. Parola tabanl\u0131 ba\u011flant\u0131larda HTTPS listener tercih edin; kimlik bilgilerini korumak i\u00e7in yaln\u0131zca a\u011f izolasyonuna g\u00fcvenmeyin.<\/p>\n<p>WinRM yap\u0131land\u0131rmas\u0131n\u0131 incelemek i\u00e7in:<\/p>\n<pre><code>winrm get winrm\/config\nwinrm get winrm\/config\/service\nwinrm get winrm\/config\/client<\/code><\/pre>\n<p>Bu komutlar istemci, servis ve genel yap\u0131land\u0131rma de\u011ferlerini ayr\u0131 ayr\u0131 g\u00f6sterir. Yaz\u0131m hatalar\u0131 k\u00fc\u00e7\u00fck g\u00f6r\u00fcn\u00fcr; yanl\u0131\u015f \u00e7\u0131kt\u0131n\u0131n pe\u015finden uzun s\u00fcre g\u00f6t\u00fcrebilir.<\/p>\n<div class=\"aiw-callout aiw-callout-warn\">\n<p class=\"aiw-callout-label\">Dikkat<\/p>\n<p>Dikkat: TrustedHosts de\u011ferini * yapmak t\u00fcm hedefleri g\u00fcvenilir kabul eder. \u00c7al\u0131\u015fma grubu ortam\u0131nda bile tek bir IP adresi veya s\u0131n\u0131rl\u0131 bir DNS listesi kullan\u0131n.<\/p>\n<\/div>\n<h2 id=\"winrm-guvenligi-nasil-artirilir\">WinRM g\u00fcvenli\u011fi nas\u0131l art\u0131r\u0131l\u0131r?<\/h2>\n<p>WinRM&#8217;yi do\u011frudan internete a\u00e7mak yerine VPN, \u00f6zel a\u011f veya kaynak IP k\u0131s\u0131tlamas\u0131 kullan\u0131n. Ev lab&#8217;\u0131nda Raspberry Pi \u00fczerinde WireGuard ile i\u00e7 a\u011fa d\u00f6nmek, y\u00f6netim portlar\u0131n\u0131 genel internete a\u00e7maktan daha kontroll\u00fc bir modeldir. Kurumsal a\u011flarda y\u00f6netim trafi\u011fi ayr\u0131 bir VLAN veya g\u00fcvenlik grubu \u00fczerinden s\u0131n\u0131rland\u0131r\u0131labilir.<\/p>\n<p>HTTPS listener olu\u015fturulacaksa sunucu ad\u0131yla e\u015fle\u015fen bir sertifika gerekir. Sertifika depoya al\u0131nd\u0131ktan sonra listener, sertifikan\u0131n parmak iziyle ili\u015fkilendirilir. Sertifikan\u0131n s\u00fcresi, subject\/SAN alanlar\u0131 ve istemci taraf\u0131ndan g\u00fcvenilir bulunup bulunmad\u0131\u011f\u0131 kontrol edilmelidir.<\/p>\n<p>Y\u00f6netici hesaplar\u0131n\u0131n tamam\u0131n\u0131 uzaktan kullanmak yerine g\u00f6rev temelli yetkilendirme uygulay\u0131n. PowerShell JEA (Just Enough Administration), belirli kullan\u0131c\u0131lar\u0131n yaln\u0131zca tan\u0131ml\u0131 komutlar\u0131 \u00e7al\u0131\u015ft\u0131rmas\u0131na izin verebilir. Windows olay g\u00fcnl\u00fcklerinde <code>Microsoft-Windows-WinRM\/Operational<\/code> kayd\u0131n\u0131 ve g\u00fcvenlik olaylar\u0131n\u0131 d\u00fczenli izleyin.<\/p>\n<p>SMB dosya payla\u015f\u0131m\u0131 i\u00e7in kullan\u0131lan <code>445\/TCP<\/code> portu ile WinRM portlar\u0131 ayn\u0131 i\u015flevi g\u00f6rmez. Dosya kopyalama ihtiyac\u0131 varsa WinRM \u00fczerinden PowerShell Remoting kullanabilir veya ayr\u0131 olarak <a href=\"https:\/\/www.vps.tc\/blog\/tr\/windows-server-smb-dosya-paylasimi-kurulumu\/\">Windows Server&#8217;da SMB Dosya Payla\u015f\u0131m\u0131 Kurulumu<\/a> yakla\u015f\u0131m\u0131n\u0131 de\u011ferlendirebilirsiniz.<\/p>\n<p><strong>Ne yap\u0131lmal\u0131<\/strong> &#8211; \u0130nternete a\u00e7\u0131k y\u00f6netim yerine VPN veya IP k\u0131s\u0131tlamas\u0131 uygulay\u0131n; HTTPS kullan\u0131yorsan\u0131z sertifika yenileme takvimi ve alarm\u0131 olu\u015fturun.<\/p>\n<div class=\"aiw-callout aiw-callout-field\">\n<p class=\"aiw-callout-label\">Sahadan not<\/p>\n<p>Bir Ansible denemesinde envanterde ansible_port=5986 tan\u0131ml\u0131yd\u0131, fakat hedef sunucuda yaln\u0131zca HTTP listener bulunuyordu. winrm enumerate winrm\/config\/listener \u00e7\u0131kt\u0131s\u0131nda Transport = HTTP ve Port = 5985 de\u011ferlerini g\u00f6rd\u00fcm; portu 5985 ile e\u015fle\u015ftirince ba\u011flant\u0131 kuruldu.<\/p>\n<\/div>\n<h2 id=\"winrm-ile-ansible-nasil-birlikte-calisir\">WinRM ile Ansible nas\u0131l birlikte \u00e7al\u0131\u015f\u0131r?<\/h2>\n<p>Ansible, Windows hedeflerde SSH yerine \u00e7o\u011funlukla WinRM kullan\u0131r. Ansible denetleyicisinde Windows host&#8217;lar\u0131 tan\u0131mlarken ba\u011flant\u0131 eklentisi, hedef adresi, port, kullan\u0131c\u0131 ve kimlik do\u011frulama y\u00f6ntemi belirtilir. HTTPS i\u00e7in genellikle 5986 portu ve uygun sertifika do\u011frulama ayarlar\u0131 kullan\u0131l\u0131r.<\/p>\n<pre><code>[windows]\nsrv01 ansible_host=192.0.2.20\n\n[windows:vars]\nansible_connection=winrm\nansible_port=5986\nansible_winrm_transport=ntlm\nansible_winrm_server_cert_validation=validate<\/code><\/pre>\n<p>\u00dcretim ortam\u0131nda sertifika do\u011frulamas\u0131n\u0131 kapatmak h\u0131zl\u0131 bir test sa\u011flayabilir; kal\u0131c\u0131 yap\u0131land\u0131rma olarak g\u00fcvenli de\u011fildir. Etki alan\u0131, Kerberos ve sertifika altyap\u0131s\u0131 mevcutsa NTLM yerine ortama uygun daha g\u00fc\u00e7l\u00fc do\u011frulama se\u00e7ilmelidir.<\/p>\n<p>Ansible kullanmadan \u00f6nce ayn\u0131 hedefte <code>Test-WSMan<\/code> ve basit bir <code>Invoke-Command<\/code> testi yap\u0131n. Ba\u011flant\u0131 katman\u0131 \u00e7al\u0131\u015fm\u0131yorsa sorunu playbook i\u00e7inde aramak, te\u015fhisi gereksiz yere karma\u015f\u0131kla\u015ft\u0131r\u0131r. \u00d6nce k\u00fc\u00e7\u00fck do\u011frulama.<\/p>\n<div class=\"aiw-callout aiw-callout-example\">\n<p class=\"aiw-callout-label\">\u00d6rnek<\/p>\n<p>\u00d6rnek senaryo: \u00dc\u00e7 Windows VPS&#039;i ayn\u0131 servis kontrol\u00fcnden ge\u00e7irmek i\u00e7in Invoke-Command ile bilgisayar adlar\u0131n\u0131 dizi olarak g\u00f6nderin. \u00d6nce Test-NetConnection ile 5985 veya 5986 portunu do\u011frulay\u0131n; port kapal\u0131ysa playbook ya da PowerShell beti\u011fi sorunu \u00e7\u00f6zmez.<\/p>\n<\/div>\n<h2 id=\"winrm-rdp-ve-ssh-arasindaki-fark\">WinRM, RDP ve SSH aras\u0131ndaki fark<\/h2>\n<p>WinRM, komut ve Windows y\u00f6netim i\u015flemleri i\u00e7in yerel uzaktan y\u00f6netim katman\u0131d\u0131r. RDP grafik masa\u00fcst\u00fc oturumu a\u00e7ar; SSH ise platformlar aras\u0131 etkile\u015fimli kabuk ve dosya aktar\u0131m\u0131 i\u00e7in yayg\u0131n bir protokold\u00fcr. Windows Server&#8217;da OpenSSH da kullan\u0131labilir. Windows&#8217;a \u00f6zg\u00fc y\u00f6netim cmdlet&#8217;leri ve PowerShell Remoting senaryolar\u0131nda WinRM daha do\u011fal bir entegrasyon sunar.<\/p>\n<table>\n<thead>\n<tr>\n<th>Y\u00f6ntem<\/th>\n<th>Temel ama\u00e7<\/th>\n<th>Varsay\u0131lan port<\/th>\n<th>Uygun senaryo<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>WinRM<\/td>\n<td>PowerShell ve Windows y\u00f6netimi<\/td>\n<td>5985\/5986<\/td>\n<td>Toplu komut, servis ve yap\u0131land\u0131rma<\/td>\n<\/tr>\n<tr>\n<td>RDP<\/td>\n<td>Grafik masa\u00fcst\u00fc<\/td>\n<td>3389\/TCP<\/td>\n<td>GUI gerektiren i\u015flemler<\/td>\n<\/tr>\n<tr>\n<td>SSH<\/td>\n<td>Uzak kabuk ve dosya aktar\u0131m\u0131<\/td>\n<td>22\/TCP<\/td>\n<td>Platformlar aras\u0131 terminal y\u00f6netimi<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>Sunucuyu yaln\u0131zca RDP ile y\u00f6netmek, \u00f6zellikle Server Core veya otomasyon a\u011f\u0131rl\u0131kl\u0131 ortamlarda gereksiz bir ba\u011f\u0131ml\u0131l\u0131k yaratabilir. WinRM ve PowerShell Remoting, ayn\u0131 i\u015flemi tekrarlanabilir komutlarla yapmay\u0131 kolayla\u015ft\u0131r\u0131r. RDP&#8217;yi masa\u00fcst\u00fc gerektiren bak\u0131m i\u015flerine ay\u0131r\u0131n.<\/p>\n<p>Sunucu de\u011fi\u015fikli\u011fi \u00f6ncesinde geri d\u00f6n\u00fc\u015f plan\u0131 da haz\u0131r olmal\u0131d\u0131r. Windows VPS \u00fczerinde snapshot kullan\u0131yorsan\u0131z <a href=\"https:\/\/www.vps.tc\/blog\/tr\/vps-snapshot-nedir-anlik-yedekleme-rehberi\/\">VPS Snapshot Nedir? Anl\u0131k Yedekleme Rehberi<\/a> ba\u015fl\u0131\u011f\u0131ndaki s\u0131n\u0131rlar\u0131 dikkate al\u0131n; snapshot, uygulama tutarl\u0131l\u0131\u011f\u0131 ve harici yedekleme ihtiyac\u0131n\u0131 ortadan kald\u0131rmaz.<\/p>\n<h2 id=\"winrm-yapilandirmasini-kontrol-edin\">WinRM Yap\u0131land\u0131rmas\u0131n\u0131 Kontrol Edin<\/h2>\n<ul class=\"aiw-checklist\">\n<li>WinRM servisinin Running durumda oldu\u011funu do\u011frulay\u0131n.<\/li>\n<li>Listener&#039;\u0131n HTTP veya HTTPS \u00fczerinde do\u011fru portu dinledi\u011fini kontrol edin.<\/li>\n<li>5985\/5986 eri\u015fimini yaln\u0131zca gerekli kaynak IP&#039;lerle s\u0131n\u0131rland\u0131r\u0131n.<\/li>\n<li>Test-WSMan ile ileti\u015fim katman\u0131n\u0131 s\u0131nay\u0131n.<\/li>\n<li>Etki alan\u0131 d\u0131\u015f\u0131nda TrustedHosts de\u011ferini dar bir listeyle yap\u0131land\u0131r\u0131n.<\/li>\n<li>HTTPS kullan\u0131yorsan\u0131z sertifika ad\u0131, s\u00fcresi ve g\u00fcven zincirini do\u011frulay\u0131n.<\/li>\n<li>WinRM olay g\u00fcnl\u00fcklerini ve ba\u015far\u0131s\u0131z oturum a\u00e7ma kay\u0131tlar\u0131n\u0131 izleyin.<\/li>\n<\/ul>\n<div class=\"aiw-cta\">\n<p>Windows sunucular\u0131n\u0131z\u0131 y\u00f6netim a\u011f\u0131 \u00fczerinden WinRM ile eri\u015filebilir h\u00e2le getirirken \u00f6nce k\u00fc\u00e7\u00fck bir Test-WSMan kontrol\u00fc yap\u0131n. Portu a\u00e7mak kolayd\u0131r; do\u011fru s\u0131n\u0131rland\u0131r\u0131lm\u0131\u015f bir y\u00f6netim kanal\u0131 kurmak as\u0131l i\u015ftir.<\/p>\n<p class=\"aiw-cta-action\"><a href=\"https:\/\/www.vps.tc\/tr\/vps\">VPS paketlerini inceleyin<\/a><\/p>\n<\/div>\n<h2 id=\"sik-sorulan-sorular\">S\u0131k Sorulan Sorular<\/h2>\n<div class=\"aiw-faq\">\n<details class=\"aiw-faq-item\" open>\n<summary>WinRM nedir?<\/summary>\n<p>WinRM, Windows Remote Management&#039;\u0131n k\u0131saltmas\u0131d\u0131r ve Windows sunucular\u0131n WS-Management protokol\u00fc \u00fczerinden uzaktan y\u00f6netilmesini sa\u011flar. PowerShell Remoting, Invoke-Command ve Enter-PSSession gibi ara\u00e7lar WinRM&#039;yi kullanabilir. Y\u00f6netici bu kanal \u00fczerinden uzak komut \u00e7al\u0131\u015ft\u0131rabilir, servis durumunu inceleyebilir ve yap\u0131land\u0131rma i\u015flemlerini grafik masa\u00fcst\u00fc a\u00e7madan ger\u00e7ekle\u015ftirebilir.<\/p>\n<\/details>\n<details class=\"aiw-faq-item\">\n<summary>WinRM hangi portu kullan\u0131r?<\/summary>\n<p>WinRM varsay\u0131lan olarak HTTP i\u00e7in 5985\/TCP, HTTPS i\u00e7in 5986\/TCP kullan\u0131r. HTTP ba\u011flant\u0131s\u0131nda trafik TLS ile \u015fifrelenmez; etki alan\u0131 i\u00e7indeki Kerberos kimlik do\u011frulamas\u0131 ve a\u011f g\u00fcvenli\u011fi \u00f6nem ta\u015f\u0131r. \u0130nternet veya g\u00fcvenilmeyen a\u011f senaryolar\u0131nda HTTPS listener, ge\u00e7erli sertifika ve kaynak IP k\u0131s\u0131tlamas\u0131 tercih edilmelidir.<\/p>\n<\/details>\n<details class=\"aiw-faq-item\">\n<summary>WinRM nas\u0131l etkinle\u015ftirilir?<\/summary>\n<p>Y\u00f6netici yetkili PowerShell oturumunda Enable-PSRemoting -Force komutu WinRM ve PowerShell Remoting yap\u0131land\u0131rmas\u0131n\u0131 etkinle\u015ftirir. Ard\u0131ndan Get-Service WinRM ile servisi, winrm enumerate winrm\/config\/listener ile listener&#039;\u0131 kontrol edin. Windows Firewall profilinin aktif oldu\u011funu ve 5985 ya da 5986 portunun yaln\u0131zca gereken kaynaklara a\u00e7\u0131k oldu\u011funu da do\u011frulay\u0131n.<\/p>\n<\/details>\n<details class=\"aiw-faq-item\">\n<summary>Test-WSMan ne i\u015fe yarar?<\/summary>\n<p>Test-WSMan, hedef bilgisayardaki WS-Management hizmetinin yan\u0131t verip vermedi\u011fini kontrol eder. Komut, uygulama yetkilerinin veya \u00e7al\u0131\u015ft\u0131r\u0131lacak her PowerShell komutunun ba\u015far\u0131l\u0131 olaca\u011f\u0131n\u0131 garanti etmez. Yan\u0131t al\u0131nam\u0131yorsa DNS, port eri\u015fimi, WinRM servisi, listener ve Windows Firewall s\u0131ras\u0131yla incelenmelidir.<\/p>\n<\/details>\n<details class=\"aiw-faq-item\">\n<summary>WinRM g\u00fcvenli mi?<\/summary>\n<p>WinRM g\u00fcvenli olabilir, ancak varsay\u0131lan yap\u0131land\u0131rmay\u0131 internete a\u00e7\u0131k b\u0131rakmak do\u011fru de\u011fildir. Y\u00f6netim portlar\u0131n\u0131 VPN, \u00f6zel a\u011f veya kaynak IP allowlist&#039;i arkas\u0131nda tutun. Etki alan\u0131nda Kerberos kullan\u0131n; etki alan\u0131 d\u0131\u015f\u0131 ba\u011flant\u0131larda HTTPS ve ge\u00e7erli sertifika yap\u0131land\u0131r\u0131n. TrustedHosts de\u011ferini * yapmaktan ka\u00e7\u0131n\u0131n ve y\u00f6netici hesaplar\u0131n\u0131 s\u0131n\u0131rlay\u0131n.<\/p>\n<\/details>\n<details class=\"aiw-faq-item\">\n<summary>WinRM ile RDP aras\u0131ndaki fark nedir?<\/summary>\n<p>WinRM komut sat\u0131r\u0131 ve PowerShell tabanl\u0131 uzaktan y\u00f6netim kanal\u0131d\u0131r; RDP ise grafik masa\u00fcst\u00fc oturumu sa\u011flar. Toplu servis kontrolleri, envanter ve otomasyon i\u00e7in WinRM daha uygundur. GUI gerektiren bak\u0131m i\u015flemlerinde RDP kullan\u0131labilir. Server Core gibi masa\u00fcst\u00fc bile\u015fenleri bulunmayan kurulumlarda WinRM temel y\u00f6netim y\u00f6ntemlerinden biridir.<\/p>\n<\/details>\n<\/div>\n<h2 id=\"kaynaklar\">Kaynaklar<\/h2>\n<ul class=\"aiw-sources\">\n<li><a href=\"https:\/\/learn.microsoft.com\/en-us\/windows\/win32\/winrm\/portal\" target=\"_blank\" rel=\"noopener\">Microsoft Learn &#8211; Windows Remote Management<\/a> \u2014 learn.microsoft.com<\/li>\n<li><a href=\"https:\/\/learn.microsoft.com\/en-us\/powershell\/module\/microsoft.powershell.core\/enable-psremoting\" target=\"_blank\" rel=\"noopener\">Microsoft Learn &#8211; Enable-PSRemoting<\/a> \u2014 learn.microsoft.com<\/li>\n<li><a href=\"https:\/\/learn.microsoft.com\/en-us\/powershell\/scripting\/security\/remoting\/winrm-security\" target=\"_blank\" rel=\"noopener\">Microsoft Learn &#8211; WinRM Security<\/a> \u2014 learn.microsoft.com<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>WinRM, Windows sunucular\u0131 PowerShell ve WS-Management \u00fczerinden uzaktan y\u00f6netmeyi sa\u011flar. Portlar\u0131, kurulumu, kimlik do\u011frulamay\u0131 ve g\u00fcvenlik ayarlar\u0131n\u0131 inceleyin.<\/p>\n","protected":false},"author":2,"featured_media":954,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[784],"tags":[],"class_list":["post-956","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-windows"],"lang":"tr","translations":{"tr":956,"en":957},"pll_sync_post":[],"_links":{"self":[{"href":"https:\/\/www.vps.tc\/blog\/wp-json\/wp\/v2\/posts\/956","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.vps.tc\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.vps.tc\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.vps.tc\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.vps.tc\/blog\/wp-json\/wp\/v2\/comments?post=956"}],"version-history":[{"count":1,"href":"https:\/\/www.vps.tc\/blog\/wp-json\/wp\/v2\/posts\/956\/revisions"}],"predecessor-version":[{"id":958,"href":"https:\/\/www.vps.tc\/blog\/wp-json\/wp\/v2\/posts\/956\/revisions\/958"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.vps.tc\/blog\/wp-json\/wp\/v2\/media\/954"}],"wp:attachment":[{"href":"https:\/\/www.vps.tc\/blog\/wp-json\/wp\/v2\/media?parent=956"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.vps.tc\/blog\/wp-json\/wp\/v2\/categories?post=956"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.vps.tc\/blog\/wp-json\/wp\/v2\/tags?post=956"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}