Knowledge - Details


Access Denied trying to manage workgroup computer remotely - Remote UAC
Date Added: 06/22/2018

The necessary services are started and firewall rules are enabled, but I still can't connect remotely to the Services, Registry, or Event Viewer on a PC on a workgroup. This is likely due to Remote UAC. Note that Remote UAC is separate from the normal local UAC. Remote UAC prevents a regular local user account with admin rights (as opposed to a domain admin account) from having admin rights when connecting remotely. Domain admin accounts are not affected by remote UAC. To disable remote UAC and allow a local admin account to manage settings from a remote PC, do this:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
Create DWORD32 LocalAccountTokenFilterPolicy
Set its value to 1.
Now you can immediately connect from the remote PC as expected.

https://support.microsoft.com/en-us/help/951016/description-of-user-account-control-and-remote-restrictions-in-windows



Back to List