Search code examples
windowspowershellwindows-serverwsman

Is there an easy way to check if CredSSP is enabled on a systems?

I am aware of the Get-WSManCredSSP function; however, this cmdlet does not work well in a script. This returns a long string similar to the following:

The machine is configured to allow delegating fresh credentials to the following target(s): wsman/*,wsman/*,wsman/*,wsman/*
This computer is configured to receive credentials from a remote client computer.

I cannot easily include this in a script that I am writing, so I'm looking for an alternative way to check CredSSP.

Solution

  • Can't you consider using this as documented in the CmdLet help: Gets the WS-Management CredSSP setting on the client (<localhost|computername>\Client\Auth\CredSSP).

    On a local machine it gives :

    (Get-Item  WSMan:\localhost\Client\Auth\CredSSP).value

    You can use it like this :

    (Get-Item  WSMan:\localhost\Client\Auth\CredSSP).value -eq $false

    You can first test if WinRm is available :

    (Get-Service -Name winrm ).Status