Set up WinRM, GPO, Server 2012

Computer configuration -> Policies -> Administrative Templates ->
Windows Components -> Windows Remote Managment (WinRM) -> WinRM Service:

Set some IP exceptions:

Add new firewall rule:

Select predefined "Windows Remote Management" Service:

Set rule type:

Just allow Connection:

Open rule for editing:

Allow execution only from domain:

Celebrate!