[Last Call] Learn how to a build a cloud-first strategyRegister Now


Enable CredSSP needed for SSO to 2008 Terminal Server on XP SP3 clients using GPO

Posted on 2008-11-18
Medium Priority
Last Modified: 2013-11-21
How can I deploy needed changes for SSO to a TS to all SP3 clients using GPO?

I suppose needed changes are:
Enable CredSSP
Enable pass-through Kerberos authentication (?)

Clients will sign on to a single terminalserver, and I do not need the hotfix to log on to a TS farm.
Question by:Intrepidity
LVL 31

Accepted Solution

Henrik Johansson earned 750 total points
ID: 22989376
Create an administrative template with the registry settings described in following KB and import it into a GPO.

Easiest way to create the ADM is to export the registry to REG-file and parse it through RegToAdm

Expert Comment

ID: 33918446
This adds the group policy settings in for CredSSP in Windows XP SP3 only. Rename this file to credssp.adm and drop it into the %WinDir%\inf folder. Go to Group Policy editor, right-click Administrative Templates and add credssp.

Note: This is just the group policy template. Other registry settings for enabling CredSSP in Windows XP SP3 are detailed at http://support.microsoft.com/kb/951608


Featured Post

Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I was prompted to write this article after the recent World-Wide Ransomware outbreak. For years now, System Administrators around the world have used the excuse of "Waiting a Bit" before applying Security Patch Updates. This type of reasoning to me …
This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP,  Windows Server…
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Suggested Courses

830 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question