What security setting is preventing Remote PowerShell 2.0 from accessing UNC paths

by

To get this to work, you must configure both your local and remote computers.

On the remote server, run the following command:

 Enable-WSManCredSSP -Role server

You’ll know things are confgured correctly if you run the Get-WSManCredSSP cmdlet and get the following output:

The machine is not configured to allow delegating fresh credentials.
This computer is configured to receive credentials from a remote client computer.

On your local computer, from an Administrative PowerShell prompt, you need to allow credential delegation in PowerShell. Run the following command:

 Enable-WSManCredSSP -Role Client -DelegateComputer <REMOTE_COMPUTER_NAME>

You can enable all servers by using * for REMOTE_COMPUTER_NAME.

You’ll know this is configured correctly when you run Get-WSManCredSSP and get the following output:

The machine is configured to allow delegating fresh credentials to the following target(s): wsman/REMOTE_SERVER_NAME
This computer is not configured to receive credentials from a remote client computer.

On your local machine, update Group Policy to allow your credentials to be delegated to the remote server.

  1. Open gpedit.msc and browse to Computer Configuration > Administrative Templates > System > Credentials Delegation.
  2. Double-click “Allow delegating fresh credentials with NTLM-only Server Authentication”.
  3. Enable the setting and add the build server to the server list as WSMAN/BuildServerName. (You can enable all servers by entering WSMAN/*.)

Then, when you need to run your command on the remote server, you can’t use any of the *-PSSession commands because CredSSP can’t use cached credentials. You have to start the session using Invoke-Command, and use CredSSP as the value to the Authentication parameter, like so:

Invoke-Command -ScriptBlock { # remote commands here } `
               -ComputerName <REMOTE_COMPUTER_NAME> `
               -Authentication CredSSP `
               -Credential <USERNAME>

More Related Contents:

  1. What’s the best way to determine the location of the current PowerShell script?
  2. Is there a way to make a PowerShell script work by double clicking a .ps1 file?
  3. Save hash table in PowerShell object notation (PSON)
  4. When should I use Write-Error vs. Throw? Terminating vs. non-terminating errors
  5. How to get disk capacity and free space of remote computer
  6. How do I write to standard error in PowerShell?
  7. Recursive file search using PowerShell
  8. Get remote registry value
  9. Executing an EXE file using a PowerShell script
  10. How to get an MD5 checksum in PowerShell
  11. Obtaining ExitCode using Start-Process and WaitForExit instead of -Wait
  12. Redirection of standard and error output appending to the same log file
  13. How do I get only directories using Get-ChildItem?
  14. Web.Config transforms outside of Microsoft MSBuild?
  15. copy-item With Alternate Credentials
  16. PowerShell – Decode System.Security.SecureString to readable password
  17. How do I concatenate two text files in PowerShell?
  18. How do I include a locally defined function when using PowerShell’s Invoke-Command for remoting?
  19. Extract the filename from a path
  20. Comparing array variables in PowerShell
  21. Copy file remotely with PowerShell
  22. How to speed up Powershell Get-Childitem over UNC
  23. Powershell script to see currently logged in users (domain and machine) + status (active, idle, away)
  24. Gracefully stopping in Powershell
  25. Can’t install nuget package because of “Failed to initialize the PowerShell host”
  26. PowerShell The term is not recognized as cmdlet function script file or operable program
  27. PowerShell is missing the terminator: “
  28. Using PowerShell to remove lines from a text file if it contains a string
  29. List of all colors available for PowerShell?
  30. Prevent trailing newline in PowerShell Out-File command

Leave a Comment