Policy
Disallow Kerberos authentication
This policy setting allows you to manage whether the Windows Remote Management (WinRM) client uses Kerberos authentication directly. If you enable this policy setting, the Windows Remote Management (WinRM) client does not use Kerberos authentication directly. Kerberos can still be used if the WinRM client is using the Negotiate authentication and Kerberos is selected. If you disable or do not configure this policy setting, the WinRM client uses the Kerberos authentication directly.
75b9aa29f589 DisallowKerberos_2 Registry
Copy registry mappings
HKLM\Software\Policies\Microsoft\Windows\WinRM\Client\AllowKerberos (enabled) = 0
HKLM\Software\Policies\Microsoft\Windows\WinRM\Client\AllowKerberos (disabled) = 1Policy notes
This policy setting allows you to manage whether the Windows Remote Management (WinRM) client uses Kerberos authentication directly. If you enable this policy setting, the Windows Remote Management (WinRM) client does not use Kerberos authentication directly. Kerberos can still be used if the WinRM client is using the Negotiate authentication and Kerberos is selected. If you disable or do not configure this policy setting, the WinRM client uses the Kerberos authentication directly.