Consider the following scenario:
Therefore, WinRM uses NT LAN Manager (NTLM) authentication instead of Kerberos authentication.
- You have a disjoint namespace in a Windows Server 2008 R2-based or Windows Server 2012-based domain environment.
- You have a Windows 7, Windows Server 2008 R2, Windows 8 or Windows Server 2012-based client computer that is located in the disjoint namespace.
- You try to register a service principal name (SPN) that has a WSMan prefix by using Windows Remote Management (WinRM) from the client computer.
Therefore, WinRM uses NT LAN Manager (NTLM) authentication instead of Kerberos authentication.