Policy

Disallow Negotiate authentication

This policy setting allows you to manage whether the Windows Remote Management (WinRM) service accepts Negotiate authentication from a remote client. If you enable this policy setting, the WinRM service does not accept Negotiate authentication from a remote client. If you disable or do not configure this policy setting, the WinRM service accepts Negotiate authentication from a remote client.

Policy
Pack Microsoft Windows
Category Windows Components / Windows Remote Management (WinRM) / WinRM Service
Policy ID 76ee59c85c2e
Internal name DisallowNegotiate_1

Registry

Copy registry mappings

HKLM\Software\Policies\Microsoft\Windows\WinRM\Service\AllowNegotiate (enabled) = 0
HKLM\Software\Policies\Microsoft\Windows\WinRM\Service\AllowNegotiate (disabled) = 1

Policy notes

This policy setting allows you to manage whether the Windows Remote Management (WinRM) service accepts Negotiate authentication from a remote client. If you enable this policy setting, the WinRM service does not accept Negotiate authentication from a remote client. If you disable or do not configure this policy setting, the WinRM service accepts Negotiate authentication from a remote client.

Related policies

Allow Basic authenticationAllow CredSSP authenticationAllow remote server management through WinRMAllow unencrypted trafficDisallow Kerberos authenticationDisallow WinRM from storing RunAs credentialsSpecify channel binding token hardening level