如何为 winrm 启用协商身份验证

Question

我已通过执行以下命令禁用了服务器上 winrm 服务的协商身份验证：

winrm put winrm/config/service/Auth @{Negotiate="false"}

现在我可以使用 winrm 执行任何操作。我收到错误：

    Message = The WinRM client cannot process the request. The WinRM client trie
d to use Negotiate authentication mechanism, but the destination computer (local
host:47001) returned an 'access denied' error. Change the configuration to allow
 Negotiate authentication mechanism to be used or specify one of the authenticat
ion mechanisms supported by the server. To use Kerberos, specify the local compu
ter name as the remote destination. Also verify that the client computer and the
 destination computer are joined to a domain. To use Basic, specify the local co
mputer name as the remote destination, specify Basic authentication and provide
user name and password. Possible authentication mechanisms reported by server:

我理解错误，但问题是我在网上找到的启用协商身份验证的唯一方法是执行：

winrm put winrm/config/service/Auth @{Negotiate="true"}

这当然给出了上面的错误。还有另一种方法可以启用协商身份验证吗？

Answer 1

使用组策略：

计算机 > 策略 > 管理模板 > Windows 组件 > Windows 远程管理 > WinRM 服务：
禁止协商身份验证：已禁用。

Answer 2

编辑注册表项 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WSMAN\Client。

将 auth_kerberos 和 auth_negotiate 设置为 1。

重新启动服务。