Let's say you have a Windows Server 2016 domain member server running Hyper-V, and you want to connect to the server via the Hyper-V management console from a workgroup computer. Assuming you've already installed the Hyper-V management tools on the client, this is what you need to do.
Firstly, on the server run: Enable-WSManCredSSP -Role server
And now, on the client:
- Run dcomcnfg.exe, and under Component Services / Computers, get the properties of My Computer, and from the COM Security tab, under Access Limits, click Edit Limits and grant ANONYMOUS LOGON both Local Access and Remote Access.
- Ensure the network location is Private (and not Public). If it is Public, open Control Panel / Network and Internet / HomeGroup and click Change network location (and click Yes when prompted).
- Open an elevated command prompt and run (entering Y when prompted): winrm quickconfig
- Add an entry to the hosts file for the target server (using the server's unqualified name).
- Run gpedit.msc, and under Computer Configuration, Administrative Templates, System, Credentials Delegation, edit Allow delegating fresh credentials with NTLM-only server authentication, and add: wsman/server (where server should be replaced with the unqualified name of the Hyper-V server).
- Now open the Hyper-V management console, and connect to the Hyper-V server, making sure to enter the credentials of a domain account with access to Hyper-V.
- When prompted to Enable delegation of user credentials, click Yes.
- You should be successfully connected.