Allow PowerShell remote access only from one address
Like explained in this article: Enabling PowerShell remoting for only a specified set of IP addresses.
(for each client pc1/pc2/pc...) you have to:
enable-psremoting
next: remove the winrm-listener that was created by enable-psremoting
Remove-WSManInstance winrm/config/Listener -SelectorSet @{Address="*";Transport="http"}
now the machine listens to nobody, so you have to create a new listener for the admin-client
New-WSManInstance winrm/config/Listener -SelectorSet @{Address="IP:10.11.12.13";Transport="http"}
now restart the winrm service
spsv winrm -pass | sasv -pass |gsv #*
(you have to run PowerShell as admin)
\*
*spsv = stop-service // sasv = start-service // gsv = get-service // -pass = -passThrough*