Allow CredSSP authentication (WinRM service)ID: oval:org.secpod.oval:def:19191 | Date: (C)2014-05-29 (M)2023-07-04 |
Class: COMPLIANCE | Family: windows |
The Allow CredSSP authentication machine setting should be configured correctly for the WinRM service.
This policy setting allows you to manage whether the Windows Remote Management (WinRM) service accepts CredSSP authentication from a remote client. If you enable this policy setting, the WinRM service will accept CredSSP authentication from a remote client. If you disable or do not configure this policy setting, the WinRM service will not accept CredSSP authentication from a remote client.
Fix:
(1) GPO: Computer Configuration\Administrative Templates\Windows Components\Windows Remote Management (WinRM)\WinRM Service\Allow CredSSP authentication
(2) KEY: HKLM\Software\Policies\Microsoft\Windows\WinRM\Service\AllowCredSSP
Platform: |
Microsoft Windows Server 2008 R2 |