# windows two hop network access issue

**URL:** <https://forum.ansible.com/t/windows-two-hop-network-access-issue/19711>\
**Category:** Ansible Project\
**Tags:** windows\
**Created:** [November 9, 2015, 2:10pm UTC](https://forum.ansible.com/t/windows-two-hop-network-access-issue/19711 "2015-11-09T14:10:36Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![mike\_od](https://avatars.discourse-cdn.com/v4/letter/m/3da27b/32.png) [@mike\_od](https://forum.ansible.com/u/mike_od)\
**Post date:** [November 9, 2015, 2:10pm UTC](https://forum.ansible.com/t/windows-two-hop-network-access-issue/19711/1 "2015-11-09T14:10:36Z")

</div>

I’m trying to run the script module with Kerberos auth on windows to call a powershell script that includes Add-DhcpServerv4Reservation and Add-DnsServerResourceRecord.

If I set ANSIBLE\_KEEP\_REMOTE\_FILES=1 I can log onto the host and execute the scrip locally with no issue but when using Ansible/winrm it doesn’t have the network access for the second hop to the domain controllers so I get permission denied.

Anyone have an example of passing credentials directly in a ps1? Credssp seems to require a ComputerName but I want to execute these commands on the server that ansible has already connected too.

Thanks,

Mike

---

<div class="post-metadata">

**Author:** ![Trond\_Hindenes](https://avatars.discourse-cdn.com/v4/letter/t/96bed5/32.png) [@Trond\_Hindenes](https://forum.ansible.com/u/Trond_Hindenes)\
**Post date:** [November 9, 2015, 7:07pm UTC](https://forum.ansible.com/t/windows-two-hop-network-access-issue/19711/2 "2015-11-09T19:07:01Z")

</div>

Kerberos will have problems with this. You may switch to basic creds, that will probably work.