Use this group policy to specify whether and how root can log in using ssh. When you enable the policy, select one of the following options from the drop-down list:
- yes — Allow root to log in using ssh.
- without password — Disable password authentication for root. It is still possible for root to log in using another form of password authentication, such as keyboard-interactive PAM.
- forced commands only — Allow root log in with public-key authentication, but only if the command option has been enabled. All other authentication methods are disabled for root.
- no — Do not allow root to log in through ssh.
This group policy modifies the
PermitRootLogin setting in the