Policy

Allow CredSSP authentication

This policy setting allows you to manage whether the Windows Remote Management (WinRM) service accepts CredSSP authentication from a remote client. If you enable this policy setting, the WinRM service accepts CredSSP authentication from a remote client. If you disable or do not configure this policy setting, the WinRM service does not accept CredSSP authentication from a remote client.

Policy
Pack Microsoft Windows
Category Windows Components / Windows Remote Management (WinRM) / WinRM Service
Policy ID ecf25e9d9d27
Internal name AllowCredSSP_1

Registry

Copy registry mappings

HKLM\Software\Policies\Microsoft\Windows\WinRM\Service\AllowCredSSP (enabled) = 1
HKLM\Software\Policies\Microsoft\Windows\WinRM\Service\AllowCredSSP (disabled) = 0

Policy notes

This policy setting allows you to manage whether the Windows Remote Management (WinRM) service accepts CredSSP authentication from a remote client. If you enable this policy setting, the WinRM service accepts CredSSP authentication from a remote client. If you disable or do not configure this policy setting, the WinRM service does not accept CredSSP authentication from a remote client.

Related policies

Allow Basic authenticationAllow remote server management through WinRMAllow unencrypted trafficDisallow Kerberos authenticationDisallow Negotiate authenticationDisallow WinRM from storing RunAs credentialsSpecify channel binding token hardening level