Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

Having error when connecting a windows 2008 event collector

Created: 05 Dec 2012 | 2 comments

error message in msvista log

Unauthorized access. Status: 401. It is possible you provided incorrect Kerberos configuration.

run the command (winrm get winrm/config) on Vista System and out put below,

 Auth
            Basic = true
            Digest = true
            Kerberos = true
            Negotiate = true
            Certificate = true
            CredSSP = false
        DefaultPorts
            HTTP = 5985
            HTTPS = 5986

Comments 2 CommentsJump to latest comment

Milan_T's picture

Hi Chinthakey,

You have set winrm configuration is incorrect.

For domain server and domain SSIM user you need to set below mentioned perameters.

winrm set winrm/config/service @{AllowUnencrypted="true"}

winrm set winrm/config/service/Auth @{Basic="false"}

 winrm set winrm/config/Winrs @{AllowRemoteShellAccess="false"}

For Non domain Server and local SSIM user you need to set below mentioned perameters.

winrm set winrm/config/service @{AllowUnencrypted="true"}

winrm set winrm/config/service/Auth @{Basic="true"}

 winrm set winrm/config/Winrs @{AllowRemoteShellAccess="false"}

Also note that password policy for SSIM local or domain user shoule be set to password never expire and password can not be changed to reduce future non log issue or authentication error for ssim user.