Log into your Domain Controller, open up ‘Default Domain Policy’ and click edit.

• Computer Configuration —> Preferences —> Control Panel Settings —> Services
  • Right click and choose New —> Service

Change:

• Startup: Automatic
• Service Action: Start service
• Click the the dots ...

Find ‘WinRM’ and select it.

Click Apply

On your domain clients type:

gupdate /force