Disallow Digest authentication

Information

This policy setting allows you to manage whether the Windows Remote Management (WinRM) client uses Digest authentication.
If you enable this policy setting, the WinRM client does not use Digest authentication.
If you disable or do not configure this policy setting, the WinRM client uses Digest authentication.

Solution

Policy Path: Windows Components\Windows Remote Management (WinRM)\WinRM Client
Policy Setting Name: Disallow Digest authentication

See Also

https://techcommunity.microsoft.com/t5/microsoft-security-baselines/security-baseline-final-for-windows-10-v1809-and-windows-server/ba-p/701082/

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-17(4), CSCv6|16.13

Plugin: Windows

Control ID: 5935b218d7c76522bfaeb842cf69852f465053b59fc96aebec2d28e83e2ac7bb