When running in restricted mode, participating apps do not expose credentials to remote computers (regardless of the delegation method). Restricted mode may limit access to resources located on other servers or networks beyond the target computer because credentials are not delegated.
Participating apps:
Remote Desktop Client
If you enable this policy setting, restricted mode is enforced and participating apps will not delegate credentials to remote computers.
If you disable or do not configure this policy setting, restricted mode is not enforced and participating apps can delegate credentials to remote computers.
Note: To disable most credential delegation, it may be sufficient to deny delegation in Credential Security Support Provider (CredSSP) by modifying Administrative template settings (located at Computer Configuration\Administrative Templates\System\Credentials Delegation).
Registry Hive | HKEY_LOCAL_MACHINE |
Registry Path | Software\Policies\Microsoft\Windows\CredentialsDelegation |
Value Name | RestrictedRemoteAdministration |
Value Type | REG_DWORD |
Enabled Value | 1 |
Disabled Value | 0 |