why remote PowerShell session dose not need username and password? this is very terrible because I feel anybody can connect remotely to my server.
I use negotiate authentication method and server machine is in domain and client machine is in outside the domain.
I use PowerShell version 4 and allow uncrypted traffic.
At first I connect VPN then with Enter-PSSession connect remote to server machine.