Error when to resolve Double Hop issue with powershell -
today need resolve double hop issue powershell.
but failed when following try:
machines: client1, server1, networkpath
one client1 run following:
$session = new-pssession -computer server1 -authentication credssp -credential "username"
following error thrown:
new-pssession : [server1] connecting remote server server1 failed following error message : winrm client cannot process request. authentication mechanism requested client not supported server or unencrypted traffic disabled in service configuration. verify unencrypted traffic setting in service configuration or specify 1 of authentication mechanisms supported server. use kerberos, specify computer name remote destination. verify client computer , destination computer joined domain. use basic, specify computer name remote destination, specify basic authentication , provide user name , password. possible authentication mechanisms reported server: negotiate more information, see about_remote_troubleshooting topic. @ line:1 char:12 + $session = new-pssession -computer server1 -authentication credssp -creden ... + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + categoryinfo : openerror: (system.manageme....remoterunspace:remoterunspace) [new-pssession], psremotin gtransportexception + fullyqualifiederrorid : accessdenied,pssessionopenfailed ps c:\windows\system32>
we have done following configuration:
client1:
enable-wsmancredssp -role client -delegatecomputer server1
server1:
enable-wsmancredssp -role server
all servers in workgroup.
following suggestions resolve double-hop issue in powershell remoting
following steps can fix err
- run gpedit.msc on client.
- expand local computer policy -> computer configuration -> administrative templates -> system -> credentials delegation.
- double click allow delegating fresh credentials ntlm-only server authentication.
- enable allow delegating fresh credentials.
- click show... , add wsman/server1.
- click several ok close popup dialogs.
now can run following script successful on client:
$session = new-pssession -computer server1 -authentication credssp -credential "username" enter-pssession $session test-path "networkpath"
Comments
Post a Comment