Allow Basic authentication

This policy setting allows you to manage whether the Windows Remote Management (WinRM) service accepts Basic authentication from a remote client. If you enable this policy setting the WinRM service accepts Basic authentication from a remote client. If you disable or do not configure this policy setting the WinRM service does not accept Basic authentication from a remote client.

Allow unencrypted traffic

This policy setting allows you to manage whether the Windows Remote Management (WinRM) service sends and receives unencrypted messages over the network. If you enable this policy setting the WinRM client sends and receives unencrypted messages over the network. If you disable or do not configure this policy setting the WinRM client sends or receives only encrypted messages over the network.

Disallow WinRM from storing RunAs credentials

This policy setting allows you to manage whether the Windows Remote Management (WinRM) service will not allow RunAs credentials to be stored for any plug-ins. If you enable this policy setting the WinRM service will not allow the RunAsUser or RunAsPassword configuration values to be set for any plug-ins. If a plug-in has already set the RunAsUser and RunAsPassword configuration values the RunAsPassword configuration value will be erased from the credential store on this computer. If you disable or do not configure this policy setting the WinRM service will allow the RunAsUser and RunAsPassword configuration values to be set for plug-ins and the RunAsPassword value will be stored securely. If you enable and then disable this policy settingany values that were previously configured for RunAsPassword will need to be reset.

Do not automatically start Windows Messenger initially

This policy setting prevents Windows Messenger from automatically running at logon. If you enable this policy setting Windows Messenger is not loaded automatically when a user logs on. If you disable or do not configure this policy setting Windows Messenger will be loaded automatically at logon. Note: This policy setting simply prevents Windows Messenger from running initially. If the user invokes and uses Windows Messenger from that point on Windows Messenger will be loaded. The user can also configure this behavior on the Preferences tab on the Tools menu in the Windows Messenger user interface. Note: If you do not want users to use Windows Messenger enable the “Do not allow Windows Messenger to run” policy setting. Note: This policy setting is available under both Computer Configuration and User Configuration. If both are present the Computer Configuration version of this policy setting takes precedence.

Do not allow Windows Messenger to be run

This policy setting allows you to prevent Windows Messenger from running. If you enable this policy setting Windows Messenger does not run. If you disable or do not configure this policy setting Windows Messenger can be used. Note: If you enable this policy setting Remote Assistance also cannot use Windows Messenger. Note: This policy setting is available under both Computer Configuration and User Configuration. If both are present the Computer Configuration version of this policy setting takes precedence.

Allow Basic authentication

This policy setting allows you to manage whether the Windows Remote Management (WinRM) client uses Basic authentication. If you enable this policy setting the WinRM client uses Basic authentication. If WinRM is configured to use HTTP transport the user name and password are sent over the network as clear text. If you disable or do not configure this policy setting the WinRM client does not use Basic authentication.

Allow unencrypted traffic

This policy setting allows you to manage whether the Windows Remote Management (WinRM) client sends and receives unencrypted messages over the network. If you enable this policy setting the WinRM client sends and receives unencrypted messages over the network. If you disable or do not configure this policy setting the WinRM client sends or receives only encrypted messages over the network.

Disallow Digest authentication

This policy setting allows you to manage whether the Windows Remote Management (WinRM) client uses Digest authentication. If you enable this policy setting the WinRM client does not use Digest authentication. If you disable or do not configure this policy setting the WinRM client uses Digest authentication.

Disallow Negotiate authentication

This policy setting allows you to manage whether the Windows Remote Management (WinRM) client uses Negotiate authentication. If you enable this policy setting the WinRM client does not use Negotiate authentication. If you disable or do not configure this policy setting the WinRM client uses Negotiate authentication.

Disallow Kerberos authentication

This policy setting allows you to manage whether the Windows Remote Management (WinRM) client uses Kerberos authentication directly. If you enable this policy setting the Windows Remote Management (WinRM) client does not use Kerberos authentication directly. Kerberos can still be used if the WinRM client is using the Negotiate authentication and Kerberos is selected. If you disable or do not configure this policy setting the WinRM client uses the Kerberos authentication directly.