tag:blogger.com,1999:blog-5384857.post1296150552552404231..comments2023-10-10T03:52:55.494+01:00Comments on Under The Stairs: PowerShell Remoting – The Double Hop Problem And A SolutionUnknownnoreply@blogger.comBlogger3125tag:blogger.com,1999:blog-5384857.post-79744728805016717292014-02-27T22:15:01.066+00:002014-02-27T22:15:01.066+00:00The module you are referring to is available in ps...The module you are referring to is available in ps version 2.0 as well. It is not limited to v3+. You might want to even check back to v1 and then update to be more accurate.midstoveilanhttps://www.blogger.com/profile/01507134506625801166noreply@blogger.comtag:blogger.com,1999:blog-5384857.post-74041649229956166052013-03-08T16:15:43.968+00:002013-03-08T16:15:43.968+00:00The reason to do this via GPO in a production envi...The reason to do this via GPO in a production environment relates to the potential security issue you didn't address. CredSSP allows you to loan your car keys to your kid... and allows your kid to loan them to someone else! Obviously, you want to exercise some control over who can re-loan your keys (credentials) like that. In your example, you wisely limited it to your domain (*.reskit.org), which is a very good practice. GPO-based configuration lets an organization enforce that centrally. It's not too hard to set up, either - I have a screenshot walkthrough in "Secrets of PowerShell Remoting" at PowerShellBooks.com.Don Joneshttps://www.blogger.com/profile/04070255244092761921noreply@blogger.comtag:blogger.com,1999:blog-5384857.post-73972922894755774162013-03-08T16:14:52.859+00:002013-03-08T16:14:52.859+00:00The reason to do this via GPO in a production envi...The reason to do this via GPO in a production environment relates to the potential security issue you didn't address. CredSSP allows you to loan your car keys to your kid... and allows your kid to loan them to someone else! Obviously, you want to exercise some control over who can re-loan your keys (credentials) like that. In your example, you wisely limited it to your domain (*.reskit.org), which is a very good practice. GPO-based configuration lets an organization enforce that centrally. It's not too hard to set up, either - I have a screenshot walkthrough in "Secrets of PowerShell Remoting" at PowerShellBooks.com. Don Joneshttps://www.blogger.com/profile/04070255244092761921noreply@blogger.com