Disallow WinRM from storing RunAs credentials

Supported OS tags: Windows10, Windows10RT, Windows11, Windows7, Windows8, Windows81, WindowsRT, WindowsRT81, WindowsServer2008, WindowsServer2012, WindowsServer2012R2, WindowsServer2016, WindowsVista

This policy setting allows you to manage whether the Windows Remote Management (WinRM) service will not allow RunAs credentials to be stored for any plug-ins. If you enable this policy setting, the WinRM service will not allow the RunAsUser or RunAsPassword configuration values to be set for any plug-ins. If a plug-in has already set the RunAsUser and RunAsPassword configuration values, the RunAsPassword configuration value will be erased from the credential store on this computer. If you disable or do not configure this policy setting, the WinRM service will allow the RunAsUser and RunAsPassword configuration values to be set for plug-ins and the RunAsPassword value will be stored securely. If you enable and then disable this policy setting,any values that were previously configured for RunAsPassword will need to be reset.

This policy has no additional user input fields.

• Computer
  Allow Basic authentication

  At least Windows Vista
• Computer
  Allow CredSSP authentication

  At least Windows Vista
• Computer
  Allow remote server management through WinRM

  At least Windows Vista
• Computer
  Allow unencrypted traffic

  At least Windows Vista
• Computer
  Disallow Kerberos authentication

  At least Windows Vista
• Computer
  Disallow Negotiate authentication

  At least Windows Vista
• Computer
  Specify channel binding token hardening level

  At least Windows Vista
• Computer
  Turn On Compatibility HTTP Listener

  At least Windows Vista
• Computer
  Turn On Compatibility HTTPS Listener

  At least Windows Vista