Auth using AD username?

Is it possible to authenticate using an Active Directory (AD) username?

>>> import winrm
>>> s = winrm.Session('192.168.123.158', auth=('example.com\Administrator', 'V@grant'))
>>> s.run_cmd('echo test')
Traceback (most recent call last):
  File "<ipython-input-10-231983453a9e>", line 1, in <module>
    s.run_cmd('echo test')
  File "/home/jakob/pywinrm/winrm/__init__.py", line 29, in run_cmd
    shell_id = self.protocol.open_shell()
  File "/home/jakob/pywinrm/winrm/protocol.py", line 118, in open_shell
    rs = self.send_message(xmltodict.unparse(rq))
  File "/home/jakob/pywinrm/winrm/protocol.py", line 190, in send_message
    return self.transport.send_message(message)
  File "/home/jakob/pywinrm/winrm/transport.py", line 99, in send_message
    raise UnauthorizedError(transport='plaintext', message=ex.msg)
UnauthorizedError: 401 Unauthorized. basic auth failed

Using winexe works:

$  winexe -U 'example.com\Administrator'%V@grant //192.168.123.158 'cmd.exe /c echo test'
test

Using the local administrator also works:

>>> import winrm
>>> s = winrm.Session('192.168.123.158', auth=('Administrator', 'V@grant'))
>>> s.run_cmd('echo test')
<Response code 0, out "test
", err "">

kind regards, Jakob

[ikkaro]

This is working on Windows 2012R2 with domain account.

import winrm
winrmHost='https://HOST:5986'
winrmUser='DOMAIN.local\USERNAME'
winrmPass='PASS'

print (winrmUser)
print (winrmPass)
#ps_script = """Get-Alias"""
s = winrm.Session(winrmHost, auth=(winrmUser, winrmPass),transport='ntlm',server_cert_validation='ignore')
r = s.run_cmd('ipconfig', ['/all'])
#r = s.run_ps(ps_script)`

print (r.status_code)
print (r.std_out)
#print (r)

Here is my winrm configuration

C:\Windows\system32>winrm get winrm/config/service
Service
RootSDDL = O:NSG:BAD:P(A;;GA;;;BA)(A;;GR;;;IU)S:P(AU;FA;GA;;;WD)(AU;SA;GXGW;;;WD)
MaxConcurrentOperations = 4294967295
MaxConcurrentOperationsPerUser = 1500
EnumerationTimeoutms = 240000
MaxConnections = 300
MaxPacketRetrievalTimeSeconds = 120
AllowUnencrypted = false
Auth
Basic = true
Kerberos = true
Negotiate = true
Certificate = false
CredSSP = false
CbtHardeningLevel = Relaxed
DefaultPorts
HTTP = 5985
HTTPS = 5986
IPv4Filter = *
IPv6Filter = *
EnableCompatibilityHttpListener = false
EnableCompatibilityHttpsListener = false
CertificateThumbprint
AllowRemoteAccess = true

[jborean93]

Domain credentials require ntlm, kerberos, or credssp support. Basic auth only works for local accounts. This is simply specified by using transport='ntlm/kerberos/credssp' on the constructor.