Disallow Negotiate authentication
- Policy ID
- DisallowNegotiate_1
- Scope
- Computer Configuration
- Supported on
- At least Windows Vista
- Source
- Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
- Category
- Windows Components › Windows Remote Management (WinRM) › WinRM Service
Description
This policy setting allows you to manage whether the Windows Remote Management (WinRM) service accepts Negotiate authentication from a remote client.
If you enable this policy setting, the WinRM service does not accept Negotiate authentication from a remote client.
If you disable or do not configure this policy setting, the WinRM service accepts Negotiate authentication from a remote client.
Registry
ComputerHKEY_LOCAL_MACHINE
- AllowNegotiateREG_DWORD