PowerShell Logo Small

Disable-WSManCredSSP



This is the built-in help made by Microsoft for the command 'Disable-WSManCredSSP', in PowerShell version 5 - as retrieved from Windows version 'Microsoft Windows Server 2012 R2 Standard' PowerShell help files on 2016-06-23.

For PowerShell version 3 and up, where you have Update-Help, this command was run just before creating the web pages from the help files.

SYNOPSIS

Disables Credential Security Support Provider (CredSSP) authentication on a client computer.

SYNTAX


Disable-WSManCredSSP [-Role] <String> [<CommonParameters>]



Search powershellhelp.space

DESCRIPTION


The Disable-WSManCredSPP cmdlet disables CredSSP authentication on a client or on a server computer. When CredSSP authentication is used, the user's credentials are passed
to a remote computer to be authenticated. This type of authentication is designed for commands that create a remote session from within another remote session. For example,
you use this type of authentication if you want to run a background job on a remote computer.


The cmdlet is used to disable CredSSP on the client by specifying Client in the Role parameter. The cmdlet then performs the following:


- Disables CredSSP on the client. The WS-Management setting <localhost|computername>\Client\Auth\CredSSP is set to false.


- Removes any WSMan/* setting from the Windows CredSSP policy AllowFreshCredentials on the client.


The cmdlet is used to disable CredSSP on the server by specifying Server in the Role parameter. The cmdlet then performs the following:


- Disables CredSSP on the server. The WS-Management setting <localhost|computername>\Service\Auth\CredSSP is set to false.


Caution: CredSSP authentication delegates the user's credentials from the local computer to a remote computer. This practice increases the security risk of the remote
operation. If the remote computer is compromised, when credentials are passed to it, the credentials can be used to control the network session.


To disable CredSSP authentication, use the Disable-WSManCredSSP cmdlet.



<

RELATED LINKS

Online Version: http://go.microsoft.com/fwlink/p/?linkid=294035
Connect-WSMan
Disconnect-WSMan
Enable-WSManCredSSP
Get-WSManCredSSP
Get-WSManInstance
Invoke-WSManAction
New-WSManInstance
New-WSManSessionOption
Remove-WSManInstance
Set-WSManInstance
Set-WSManQuickConfig
Test-WSMan

REMARKS

<

Examples


-------------------------- EXAMPLE 1 --------------------------

PS C:\>Disable-WSManCredSSP -Role Client



This command disables CredSSP on the client, which prevents delegation to servers.










-------------------------- EXAMPLE 2 --------------------------

PS C:\>Disable-WSManCredSSP -Role Server



This command disables CredSSP on the server, which prevents delegation from clients.