Kerberos delegation for second hop remoting || configure credssp
This guide will provide step-by-step instructions on how to configure Kerberos delegation for second hop remoting in PowerShell, enabling users to remotely manage resources that require multiple hops while maintaining a high level of security and preventing credential theft.
#Kerberos #delegation #secondhopremoting #CredSSP #powershell
Command that i used in lab is below :
1. Enter-PSSession –ComputerName additionaldomai
2. Invoke-Command –ComputerName dcdemoserver –ScriptBlock { Get-WindowsFeature | Where-Object {$_.InstallState –eq ‘Installed’} }
3. Enable-WSManCredSSP –Role Client –DelegateComputer additionaldomai.syztech.com -Force
4. Get-WSManCredSSP
5. Invoke-Command –ComputerName additionaldomai –ScriptBlock {Enable-WSManCredSSP –Role Server -Force}
6. Enter-PSSession –ComputerName additionaldomai.syztech.com –Credential syztech\administrator –Authentication CredSSP
7. Invoke-Command –ComputerName dcdemoserver –ScriptBlock { Get-WindowsFeature | Where-Object {$_.InstallState –eq ‘Installed’} }
8. Disable-WSManCredSSP –Role Client
9. Invoke-Command –ComputerName additionaldomai –ScriptBlock { Disable-WSManCredSSP –Role Server }