-
Notifications
You must be signed in to change notification settings - Fork 0
Getting Started
- PowerShell 5.0 or later
- CredSSP configured
- Administrative privileges on the SharePoint Server
You can manually configure CredSSP through the use of some PowerShell cmdlet's (and potentially group policy to configure the allowed delegate computers). Some basic instructions can be found at https://technet.microsoft.com/en-us/magazine/ff700227.aspx.
It is possible to use a DSC resource to configure your CredSSP settings on a server, and include this in all of your SharePoint server configurations. This is done through the use of the xCredSSP resource. The below example shows how this can be used.
xCredSSP CredSSPServer { Ensure = "Present"; Role = "Server" }
xCredSSP CredSSPClient { Ensure = "Present"; Role = "Client"; DelegateComputers = $CredSSPDelegates }
In the above example, $CredSSPDelegates
can be a wildcard name (such as "*.contoso.com" to allow all servers in the contoso.com domain), or a list of specific servers (such as "server1", "server 2" to allow only specific servers).
- Download the latest release and unzip to a directory on your SharePoint Server.
- Prepare your JSON configuration file, see Configuration page for more details.
- Run the script with the following command:
.\SPSTrust.ps1 -ConfigFile 'contoso-PROD.json' -FarmAccount (Get-Credential)
For the next steps, go to the Configuration page.
A full list of changes in each version can be found in the change log.