PowerShell remoting: Enter-PSSession vs Invoke-Command, Just Enough Administration (JEA) role capability and session configuration files

PowerShell remoting lets you run commands on other computers over Windows Remote Management (WinRM), which listens on TCP 5985 for HTTP and 5986 for HTTPS. On Windows Server it is enabled by default; on clients you run Enable-PSRemoting. In a domain, Kerberos authenticates the connection and the WinRM traffic is encrypted even over HTTP. Outside a domain you typically use HTTPS or add hosts to the TrustedHosts list.