Knowledge - Details

Access Denied trying to manage workgroup computer remotely - Remote UAC
Date Added: 6/22/2018

The necessary services are started and firewall rules are enabled, but I still can't connect remotely to the Services, Registry, or Event Viewer on a PC on a workgroup. This is likely due to Remote UAC. Note that Remote UAC is separate from the normal local UAC. Remote UAC prevents a regular local user account with admin rights (as opposed to a domain admin account) from having admin rights when connecting remotely. Domain admin accounts are not affected by remote UAC. To disable remote UAC and allow a local admin account to manage settings from a remote PC, do this:

Create DWORD32 LocalAccountTokenFilterPolicy
Set its value to 1.
Now you can immediately connect from the remote PC as expected.

Back to List