title: Powershell CREDSSP Problems
body: <p>I am trying to use CREDSSP on a New Server (Server C)</p>
  
  <p>I have successfully setup credssp on Two Other Servers. (Server A to Server B)</p>
  
  <p>I am now trying to connect from Server A to Server C using CREDSSP, but no matter what I do, I get the following error:</p>
  
  <p>[SERVER_C.domain.edu] Connecting to remote server SERVER_C.domain.edu failed with the following error message : Access is denied. For more information, see the about_Remote_Troubleshooting Help topic.
      + CategoryInfo          : OpenError: (SERVER_C.domain.edu:String) [], PSRemotingTransportException
      + FullyQualifiedErrorId : AccessDenied,PSSessionStateBroken</p>
  
  <p>This is my query that works perfectly from Server A to Server B:</p>
  
  <pre><code># Setting the Credentials to be used to sign into the Server B. 
      $pass = ConvertTo-SecureString "Password" -asplaintext -force
      $mycred = new-object -typename System.Management.Automation.PSCredential -argumentlist "domain\user.service",$pass
  #
  #
  # The Remote Execution Command. Fully Qualified Domain name is critical since we are using Credssp.
  # Credssp is being used to resolve an issue with a double hop authentication issue. Other steps setup on each computer had to be completed before Credssp would work
     Invoke-Command -ComputerName SERVER_B.domain.edu -command { C:\helloWorld.ps1 } -Authentication Credssp  -Credential $mycred
  </code></pre>
  
  <p>I have double checked everything I can think of between Server C (New Server) and Server B (Old Server) and I cant find any reason why im getting the error.</p>
  
  <p>I know that if I take out the CREDSSP part, The script works, except where a double hop is involved. So the Server is definitely connecting. </p>
  
  <p>I made sure to run the following commands: </p>
  
  <pre><code>Enable-psremoting
  
  Set-ExecutionPolicy -Scope localMachine -ExecutionPolicy RemoteSigned
  
  Enable-WSManCredSSP -Role Client -DelegateComputer '*.reskit.org' –Force 
  Enable-WSManCredSSP -Role Server –Force
  
  wsman
  </code></pre>
  
  <p>Also followed these steps: Use gpedit.msc and look at the following policy: Computer Configuration -> Administrative Templates -> System 
  -> Credentials Delegation -> Allow Delegating Fresh Credentials.  Verify that it is enabled and configured with an SPN appropriate for the target computer. For example, 
  for a target computer name "myserver.domain.com", the SPN can be one of the following: WSMAN/myserver.domain.com or WSMAN/*.domain.com. For more information, see the 
  about_Remote_Troubleshooting Help topic. </p>
  
  <p>And as I mentioned, I know Server A is setup correctly, because I run the script above to Server B without issue.</p>
  
  <p>Any suggestions would really be appreciated.</p>
  
  <p>The only thought I have is that Server A and B are running Powershell 3 and Server C is running Powershell 5</p>