In WinRM Service section of Group Policy, I have the option of disabling the following authentication mechanisms:
- Basic
- CredSSP
- Kerberos
- Negotiate
With concerns of security in mind, I would like to disable any authentication methods that could add extra vulnerabilities in the environment. That said, I want to do my best not to break expected functionality of the system, and understand what effect disabling authentication methods will have.
That said, what effects can I expect if I were to disable CredSSP and Negotiate? I'm hoping that Kerberos would be used for everything in an AD environment, and Basic is going to be disabled regardless.