what happens when credssp is enabled

Janus Bariñan 1,126 Reputation points
2021-07-28T03:18:03.837+00:00

When I run winrm get winrm/config i see credssp = false under Auth section.

If I enable this for one particular Domain controller will it get replicated to other domain controllers?

Also, would there be a global effect if credssp is enable on that particular DC?

Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
13,089 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Miles 1,261 Reputation points
    2021-07-29T05:24:13.683+00:00

    Hi

    About Enable-WSManCredSSP, we could refer to this Microsoft Documentation article:
    Enable-WSManCredSSP
    https://learn.microsoft.com/en-us/powershell/module/microsoft.wsman.management/enable-wsmancredssp?view=powershell-7.1

    In general , enabling this for one particular DC will not be replicated to another.
    118912-72901.png
    One we need to notice is that this parctice increases the security risk of the remote operation.
    118913-72902.png

    Hope the above information could bring you some help.
    Best Regards

    -------------------------------------------------------------------------------------

    If the Answer is helpful, please click "Accept Answer" and upvote it.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.