Disallow Negotiate authentication

Supported on: At least Windows Vista

Registry

HKLM Software\Policies\Microsoft\Windows\WinRM\Service

Value name: AllowNegotiate

Enabled: AllowNegotiate = 0

Disabled: AllowNegotiate = 1

Description

This policy setting allows you to manage whether the Windows Remote Management (WinRM) service accepts Negotiate authentication from a remote client. If you enable this policy setting, the WinRM service does not accept Negotiate authentication from a remote client. If you disable or do not configure this policy setting, the WinRM service accepts Negotiate authentication from a remote client.