Knowledge - Details

Access Denied trying to manage workgroup computer remotely - Remote UAC
Date Added: 6/22/2018

The necessary services are started and firewall rules are enabled, but I still can't connect remotely to the Services, Registry, or Event Viewer on a PC on a workgroup.  This is likely due to Remote UAC.  Note that Remote UAC is separate from the normal local UAC.  Remote UAC prevents a regular local user account with admin rights (as opposed to a domain admin account) from having admin rights when connecting remotely.  Domain admin accounts are not affected by remote UAC.  To disable remote UAC and allow a local admin account to manage settings from a remote PC, do this:

Create DWORD32 LocalAccountTokenFilterPolicy
Set its value to 1.
Now you can immediately connect from the remote PC as expected.

Back to List

Disclaimer: Everything on this website is written for my own use. I disclaim any guarantees that the procedures and advice listed here are accurate, safe, or beneficial for anyone else. If you attempt to follow any procedures or advice shared here, you do it at your own risk. Part of IT work is knowing how to recover from problems.