Enable CredSSP needed for SSO to 2008 Terminal Server on XP SP3 clients using GPO

Posted on 2008-11-18
Last Modified: 2013-11-21
How can I deploy needed changes for SSO to a TS to all SP3 clients using GPO?

I suppose needed changes are:
Enable CredSSP
Enable pass-through Kerberos authentication (?)

Clients will sign on to a single terminalserver, and I do not need the hotfix to log on to a TS farm.
Question by:Intrepidity
    LVL 31

    Accepted Solution

    Create an administrative template with the registry settings described in following KB and import it into a GPO.

    Easiest way to create the ADM is to export the registry to REG-file and parse it through RegToAdm

    Expert Comment

    This adds the group policy settings in for CredSSP in Windows XP SP3 only. Rename this file to credssp.adm and drop it into the %WinDir%\inf folder. Go to Group Policy editor, right-click Administrative Templates and add credssp.

    Note: This is just the group policy template. Other registry settings for enabling CredSSP in Windows XP SP3 are detailed at


    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Too many email signature changes to deal with?

    Are you constantly being asked to update your organization's email signatures? Do they take up too much of your time? Wouldn't you love to be able to manage all signatures from one central location, easily design them and deploy them quickly to users. Well, you can!

    Welcome to my series of short tips on migrations. Whilst based on Microsoft migrations the same principles can be applied to any type of migration. My first tip Migration Tip #1 – Source Server Health can be found listed in my profile here: http:…
    Have you considered what group policies are backwards and forwards compatible? Windows Active Directory servers and clients use group policy templates to deploy sets of policies within your domain. But, there is a catch to deploying policies. The…
    This tutorial will give a an overview on how to deploy remote agents in Backup Exec 2012 to new servers. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as connecting to a remote Back…
    This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…

    760 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    8 Experts available now in Live!

    Get 1:1 Help Now