Enabling Delegation of User Credentials in Hyper-V

Windows Server 2022,2025

On the Hyper-V host

  1. Enable PowerShell Remoting.
Enable-PSRemoting
  1. Enable CredSSP Authentication.
Enable-WSManCredSSP -Role server

On the client machine

  1. Configure Trusted Hosts.
Set-Item WSMan:\localhost\Client\TrustedHosts -Value "fqdn-of-hyper-v-host"
  1. Enable CredSSP Authentication.
Enable-WSManCredSSP -Role client -DelegateComputer "fqdn-of-hyper-v-host"
  1. Modify Local Group Policy.

a) Open gpedit.msc -> Computer Configuration -> Administrative Templates -> System -> Credentials Delegation.
b) Enable the policy Allow delegating fresh credentials with NTLM-only server authentication.
c) Add the values wsman/fqdn-of-hyper-v-host.

Enter-PSSession

Enter-PSSession -ComputerName 'HYPER-V-1'

Reference

・ https://docs.delinea.com/online-help/secret-server-11-6-x/authentication/configuring-credssp-for-winrm-with-powershell/index.htm