Disallow Negotiate authentication

This policy setting allows you to manage whether the Windows Remote Management (WinRM) service accepts Negotiate authentication from a remote client.

If you enable this policy setting, the WinRM service does not accept Negotiate authentication from a remote client.

If you disable or do not configure this policy setting, the WinRM service accepts Negotiate authentication from a remote client.


Supported on: At least Windows Vista
Registry HiveHKEY_LOCAL_MACHINE
Registry PathSoftware\Policies\Microsoft\Windows\WinRM\Service
Value NameAllowNegotiate
Value TypeREG_DWORD
Enabled Value0
Disabled Value1

windowsremotemanagement.admx

Administrative Templates (Computers)

Administrative Templates (Users)