How do you run <knife winrm> against attribute based groups

I’m a windows admin that’s new to chef, so any help would be appreciated. I’m able to to run against groups of Linux servers using “os:linux” with no issue. However, when running <knife winrm “os:windows” ‘ipconfig’ -x “domain\username” -P ‘password’> it fails with error "Failed to authenticate to [os:windows] as domain\username Response: Bad HTTP response returned from server (401)
note: when running in verbose I can see it’s finding all the windows servers, but it ends with the error above

I can run this same command against a single machine without issue. <knife winrm “name:example.test.net” ‘ipconfig’ -x “domain\username” -P ‘password’>

I run <knife search “os:windows”> and it returns all my windows servers