docs(index): winrm remote exec on the wonder boxes disabled 2026-09-11 (security software); UNC copies + direct SQL still allowed
Claude-Session: https://claude.ai/code/session_01PpXxRCFznFqE65ay6wAJwe
This commit is contained in:
@@ -190,6 +190,12 @@ publish; registry `BaseUrl` host rule) and the QA topology note: [`ZB.MOM.WW.Ove
|
||||
> is orthogonal to the deployment tier. No production box has been identified. Full host/port
|
||||
> inventory for both tiers: [`deployment.md`](deployment.md) §2.1 + §7.1.
|
||||
>
|
||||
> ⛔ **Remote command execution on the wonder boxes is DISABLED (2026-09-11).** The `winrm` skill
|
||||
> (WinRM exec/ps, service control) set off the security software and has been moved to
|
||||
> `~/.claude/skills-disabled/winrm`; do not use it or stand up a replacement channel until the user
|
||||
> clears one. **Still allowed:** UNC/SMB file copies to the boxes and logging directly into the SQL
|
||||
> Servers. Any deploy step that needs a command run on a box is blocked until a new channel is found.
|
||||
>
|
||||
> **Deployed state (2026-09-10):** DEV and both QA nodes run every repo tip — ScadaBridge `2b9a7c3c`,
|
||||
> OtOpcUa `b8b4c18f`, mxaccessgw `4f931e4` (Server + x86 Worker), HistorianGateway `d8d890c`, Overview
|
||||
> `846b77f`/`818775b3` (code-identical). All driven from the Mac by the `winrm` skill (WinRM 5985 + SMB 445,
|
||||
|
||||
Reference in New Issue
Block a user