February 8, 2025

There are certain circumstance when you cannot connect to the administrative share on a remote computer (i.e. c$, d$, or Admin$).

Problem

When trying to access an admin share with the proper credentials from a remote computer:

Solution

UAC remote restrictions can be disabled by setting the registry value LocalAccountTokenFilterPolicy to 1:

Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
Value: LocalAccountTokenFilterPolicy
Data: 1 to disable, 0 enables filtering
Type: REG_DWORD (32-bit)

How to set LocalAccountTokenFilterPolicy from the command line

From an elevated command prompt

reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System /v LocalAccountTokenFilterPolicy /t REG_DWORD /d 1 /f

Unless you’re system is running Windows 8/10/Server 2016/2019/2022. Please reboot the system after the registry entry has been added.

Leave a Reply

Your email address will not be published. Required fields are marked *