WinRM authentication method???

Question

Ok, I have not found the actual winrm authentication method listed in a support doc. I have the port requirements for http/https, but nothing specific about authentication in big bold letters that my tiny brain can understand. I came across a reference to CredSSP failures in the troubleshooting winrm document. We are discussing disabling Basic Authentication for Winrm. While I am fairly certain that Basic Auth is not used by the SolarWinds winrm configuration, I figured it would be safe to ask.

Seashore · Answer

Normal node polling is NOT done with WinRM but with WMI over DCOM/RPC. Only SAM polling is using WMI over WinRM at the moment.

marcrobinson · Answer

Application component polling allows you to choose at the component level. Unfortunately, I have not found a direct answer for just node polling. @Seashore I tend to agree that it might be negotiate, which used kerberos for domain accounts and ntlm for local accounts. But this is still a guess. I will post here what I find out. Here is a link to the article on the component configuration with the section on winrm.

Seashore · Answer

I think it will be kerberos or ntlm depending on what the Windows settings are. Hope so anyway...