How to Edit the Local Group Policy on the Installer Computer

 

Updated: May 13, 2016

Applies To: System Center 2012 - Unified Installer

To edit the local Group Policy for the System Center 2012 – Unified Installer, complete the following procedures on the computer where you are running the Unified Installer.

To start the Local Group Policy Editor

  1. Click Start, and then click Run.

  2. In Open, type mmc, and then click OK.

  3. On the File menu, click Add/Remove Snap-in.

  4. In the Add or Remove Snap-ins window, in the Available snap-ins list, click Group Policy Object, and then click Add.

  5. In the Select Group Policy Object dialog box, click Finish.

  6. In the Add or Remove Snap-ins window, click OK.

To edit the Group Policy settings

  1. In the Console1 window, in the Console Root, expand Local Computer Policy, expand Computer Configuration, expand Administrative Templates, expand System, and then click Credential Delegation.

  2. In the Settings pane, double-click Allow Delegating Fresh Credentials.

  3. In the Allow Delegating Fresh Credentials dialog box, do the following:

    1. Click Enabled.

    2. In the Options area, click Show.

    3. In Value, type WSMAN/*, and then click OK.

    4. Make sure that Concatenate OS defaults with input above is selected, and then click OK.

  4. In the Settings pane, double-click Allow Delegating Fresh Credentials with NTLM-only Server Authentication.

  5. In the Allow Delegating Fresh Credentials with NTLM-only Server Authentication dialog box, do the following:

    1. Click Enabled.

    2. In the Options area, click Show.

    3. In Value, type WSMAN/*, and then click OK.

    4. Make sure that Concatenate OS defaults with input above is selected, and then click OK.

  6. You can edit the following policies by using either the local group policy editor or the WinRM commands. If you want to use the WinRM commands, see the topic How to Run WinRM Commands on the Installer Computer. Otherwise, continue with step 7.

  7. In the Console1 window, in the Console Root, expand Local Computer Policy, expand Computer Configuration, expand Administrative Templates, expand Windows Components, expand Windows Remote Management (WRM), and then click WinRM Client.

  8. In the Settings pane, double-click Allow CredSSP authentication.

  9. In the Allow CredSSP authentication dialog box, click Enabled, and then click OK.

  10. In the Settings pane, double-click Trusted Hosts.

  11. In the Trusted Hosts dialog box, click Enabled.

  12. In the Options area, in TrustedHostsList, type *, and then click OK.

  13. Close the Local Group Policy Editor.

See Also

Preparing an Installer Computer for System Center 2012 - Unified Installer