Access Denied trying to manage workgroup computer remotely - Remote UAC

Added: 6/21/2018 8:00 PM


The necessary services are started and firewall rules are enabled, but I still can't connect remotely to the Services, Registry, or Event Viewer on a PC on a workgroup. This is likely due to Remote UAC. Note that Remote UAC is separate from the normal local UAC. Remote UAC prevents a regular local user account with admin rights (as opposed to a domain admin account) from having admin rights when connecting remotely. Domain admin accounts are not affected by remote UAC. To disable remote UAC and allow a local admin account to manage settings from a remote PC, do this: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System Create DWORD32 LocalAccountTokenFilterPolicy Set its value to 1. Now you can immediately connect from the remote PC as expected. https://support.microsoft.com/en-us/help/951016/description-of-user-account-control-and-remote-restrictions-in-windows