Access Denied trying to manage workgroup computer remotely - Remote UAC
Date Added: 6/22/2018

The necessary services are started and firewall rules are enabled, but I still can't connect remotely to the Services, Registry, or Event Viewer on a PC on a workgroup.  This is likely due to Remote UAC.  Note that Remote UAC is separate from the normal local UAC.  Remote UAC prevents a regular local user account with admin rights (as opposed to a domain admin account) from having admin rights when connecting remotely.  Domain admin accounts are not affected by remote UAC.  To disable remote UAC and allow a local admin account to manage settings from a remote PC, do this:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
Create DWORD32 LocalAccountTokenFilterPolicy
Set its value to 1.
Now you can immediately connect from the remote PC as expected.

https://support.microsoft.com/en-us/help/951016/description-of-user-account-control-and-remote-restrictions-in-windows

---

Back to List