CS2: 2003 Powershell Enter-pssession connects to another server and reports an error

Summary of customer questions:

Users report that a Win 2003 SP2 server in the domain uses Powershell, "enter-pssession" links to another server does not work, and there is no other problem with the server.

Error content:

WSManFault

Message = WinRM cannot process the request. The following error occured while using Negotiate authentication: An unknown security error occurred.

Possible causes are:

-The user name or password specified are invalid.

-Kerberos is used when no authentication method and no user name are specified.

-Kerberos accepts domain user names, but not local user names.

-The Service Principal Name (SPN) for the remote computer name and port does not exist.

-The client and remote computers are in different domains and there is no trust between the two domains.

After checking for the above issues, try the following:

-Check the Event Viewer for events related to authentication.

-Change the authentication method; add the destination computer to the WinRM TrustedHosts configuration setting or use

HTTPS transport.

Note that computers in the TrustedHosts list might not be authenticated.

-For more information about WinRM configuration, run the following command: winrm help config.

Solution:

Check the security log and find that there is a problem with the SPN registration of this server. After re-registering spn, you can register the spn tool as setspn.exe.

For example:

Setspn-l HTTP/Servername confirm SPN

Setspn-Q HTTP/Servername.fqdn

Duplicate SPN found

Setspn-x Delete duplicate spn