{"id":1708,"date":"2017-04-17T23:29:45","date_gmt":"2017-04-18T03:29:45","guid":{"rendered":"http:\/\/www.bhargavs.com\/?p=1693"},"modified":"2017-04-17T23:29:45","modified_gmt":"2017-04-18T03:29:45","slug":"remotely-accessing-admin-shares-on-windows-10","status":"publish","type":"post","link":"https:\/\/bhargavs.com\/index.php\/2017\/04\/17\/remotely-accessing-admin-shares-on-windows-10\/","title":{"rendered":"Remotely accessing admin shares on Windows 10"},"content":{"rendered":"

I\u2019m sure I have come across this issue before but never cared to document it here on my blog. And when I do that, I am sure to trip up again and forget what I did to fix it. So this time, I\u2019m going to make sure I put it here for my own benefit.<\/p>\n

I installed Windows 10 recently to replace aging Windows Server 2012 R2 Essentials which was serving as DLNA server to my TV, Xbox One and other DLNA clients in my home. Once installed, I wanted to access D drive where I store all my family photos and videos. How difficult would it be once I made sure the firewall wasn\u2019t blocking file and print services? But was I wrong!! I tried to browser \\\\windows10\\d$<\/a> and got login prompt as expected. I happily provided it with my credentials, which happened to be the only user on the Windows 10 machine and also happened to be an admin account. To my surprise, I got an error \u201caccess is denied\u201d!!!<\/p>\n

I remembered this had happened before on Windows 8 and I vaguely remembered I had to do something, but what I did was escaping me. After firing up a search, I came across many articles. TechNet article \u201cYou Encounter Unexpected Behavior When You Log on to a Remote Computer and UAC Is Enabled<\/a>\u201d was one of them.<\/p>\n

Now I realized what UAC did to admin accounts. It restricts admin users to standard user equivalent to prevent \u201cloopback\u201d attacks carried out remotely from network. By treating users who are members of local Administrators group, UAC tries to protect against such attacks. However, the problem with that is, I can\u2019t access administrative shares remotely anymore! I must either explicitly create shares I want to access remotely and provide permissions to the account I want to use (even if it is an account with Administrator permissions.<\/p>\n

If I want to access administrative shares, I must change system polity to disable token filtering. By disabling LocalAccountTokenFilterPolicy, I am instructing UAC to not filter out Admin SIDs and reduce them to regular user.<\/p>\n

While I am not recommending you do so, I am only documenting what needs to be done if I want to do so. To disable UAC remote restrictions, create or edit DWORD key LocalAccountTokenFilterPolicy in registry at the following location: HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System. Set the value of LocalAccountTokenFilterPolicy to 1 and you should be able to access admin shares such as C$ remotely with your admin accounts.<\/p>\n

Cheers!<\/p>\n

 <\/p>\n

P.S. I must also thank Helge Klein whose very informative post helped me understand the problem. https:\/\/helgeklein.com\/blog\/2011\/08\/access-denied-trying-to-connect-to-administrative-shares-on-windows-7\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

I\u2019m sure I have come across this issue before but never cared to document it here on my blog. And when I do that, I am sure to trip up […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"pgc_sgb_lightbox_settings":"","jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[35],"tags":[71,72,155,259],"class_list":["post-1708","post","type-post","status-publish","format-standard","hentry","category-windows-10","tag-access-denied","tag-admin-shares","tag-localaccounttokenfilterpolicy","tag-uac"],"yoast_head":"\nRemotely accessing admin shares on Windows 10 - Bhargav's IT Playground<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/bhargavs.com\/index.php\/2017\/04\/17\/remotely-accessing-admin-shares-on-windows-10\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Remotely accessing admin shares on Windows 10 - Bhargav's IT Playground\" \/>\n<meta property=\"og:description\" content=\"I\u2019m sure I have come across this issue before but never cared to document it here on my blog. And when I do that, I am sure to trip up […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/bhargavs.com\/index.php\/2017\/04\/17\/remotely-accessing-admin-shares-on-windows-10\/\" \/>\n<meta property=\"og:site_name\" content=\"Bhargav's IT Playground\" \/>\n<meta property=\"article:published_time\" content=\"2017-04-18T03:29:45+00:00\" \/>\n<meta name=\"author\" content=\"Bhargav\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Bhargav\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/bhargavs.com\\\/index.php\\\/2017\\\/04\\\/17\\\/remotely-accessing-admin-shares-on-windows-10\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/bhargavs.com\\\/index.php\\\/2017\\\/04\\\/17\\\/remotely-accessing-admin-shares-on-windows-10\\\/\"},\"author\":{\"name\":\"Bhargav\",\"@id\":\"https:\\\/\\\/bhargavs.com\\\/#\\\/schema\\\/person\\\/28f6d8c9b29f3a879483d65fc2ab5e26\"},\"headline\":\"Remotely accessing admin shares on Windows 10\",\"datePublished\":\"2017-04-18T03:29:45+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/bhargavs.com\\\/index.php\\\/2017\\\/04\\\/17\\\/remotely-accessing-admin-shares-on-windows-10\\\/\"},\"wordCount\":453,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/bhargavs.com\\\/#\\\/schema\\\/person\\\/28f6d8c9b29f3a879483d65fc2ab5e26\"},\"keywords\":[\"Access Denied\",\"Admin Shares\",\"LocalAccountTokenFilterPolicy\",\"UAC\"],\"articleSection\":[\"Windows 10\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/bhargavs.com\\\/index.php\\\/2017\\\/04\\\/17\\\/remotely-accessing-admin-shares-on-windows-10\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/bhargavs.com\\\/index.php\\\/2017\\\/04\\\/17\\\/remotely-accessing-admin-shares-on-windows-10\\\/\",\"url\":\"https:\\\/\\\/bhargavs.com\\\/index.php\\\/2017\\\/04\\\/17\\\/remotely-accessing-admin-shares-on-windows-10\\\/\",\"name\":\"Remotely accessing admin shares on Windows 10 - Bhargav's IT Playground\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/bhargavs.com\\\/#website\"},\"datePublished\":\"2017-04-18T03:29:45+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/bhargavs.com\\\/index.php\\\/2017\\\/04\\\/17\\\/remotely-accessing-admin-shares-on-windows-10\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/bhargavs.com\\\/index.php\\\/2017\\\/04\\\/17\\\/remotely-accessing-admin-shares-on-windows-10\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/bhargavs.com\\\/index.php\\\/2017\\\/04\\\/17\\\/remotely-accessing-admin-shares-on-windows-10\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/bhargavs.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Remotely accessing admin shares on Windows 10\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/bhargavs.com\\\/#website\",\"url\":\"https:\\\/\\\/bhargavs.com\\\/\",\"name\":\"Bhargav's IT Playground\",\"description\":\"Passion for Technology. Power of Collaboration.\",\"publisher\":{\"@id\":\"https:\\\/\\\/bhargavs.com\\\/#\\\/schema\\\/person\\\/28f6d8c9b29f3a879483d65fc2ab5e26\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/bhargavs.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\\\/\\\/bhargavs.com\\\/#\\\/schema\\\/person\\\/28f6d8c9b29f3a879483d65fc2ab5e26\",\"name\":\"Bhargav\",\"logo\":{\"@id\":\"https:\\\/\\\/bhargavs.com\\\/#\\\/schema\\\/person\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/bhargavs.com\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Remotely accessing admin shares on Windows 10 - Bhargav's IT Playground","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/bhargavs.com\/index.php\/2017\/04\/17\/remotely-accessing-admin-shares-on-windows-10\/","og_locale":"en_US","og_type":"article","og_title":"Remotely accessing admin shares on Windows 10 - Bhargav's IT Playground","og_description":"I\u2019m sure I have come across this issue before but never cared to document it here on my blog. And when I do that, I am sure to trip up […]","og_url":"https:\/\/bhargavs.com\/index.php\/2017\/04\/17\/remotely-accessing-admin-shares-on-windows-10\/","og_site_name":"Bhargav's IT Playground","article_published_time":"2017-04-18T03:29:45+00:00","author":"Bhargav","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Bhargav","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/bhargavs.com\/index.php\/2017\/04\/17\/remotely-accessing-admin-shares-on-windows-10\/#article","isPartOf":{"@id":"https:\/\/bhargavs.com\/index.php\/2017\/04\/17\/remotely-accessing-admin-shares-on-windows-10\/"},"author":{"name":"Bhargav","@id":"https:\/\/bhargavs.com\/#\/schema\/person\/28f6d8c9b29f3a879483d65fc2ab5e26"},"headline":"Remotely accessing admin shares on Windows 10","datePublished":"2017-04-18T03:29:45+00:00","mainEntityOfPage":{"@id":"https:\/\/bhargavs.com\/index.php\/2017\/04\/17\/remotely-accessing-admin-shares-on-windows-10\/"},"wordCount":453,"commentCount":0,"publisher":{"@id":"https:\/\/bhargavs.com\/#\/schema\/person\/28f6d8c9b29f3a879483d65fc2ab5e26"},"keywords":["Access Denied","Admin Shares","LocalAccountTokenFilterPolicy","UAC"],"articleSection":["Windows 10"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/bhargavs.com\/index.php\/2017\/04\/17\/remotely-accessing-admin-shares-on-windows-10\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/bhargavs.com\/index.php\/2017\/04\/17\/remotely-accessing-admin-shares-on-windows-10\/","url":"https:\/\/bhargavs.com\/index.php\/2017\/04\/17\/remotely-accessing-admin-shares-on-windows-10\/","name":"Remotely accessing admin shares on Windows 10 - Bhargav's IT Playground","isPartOf":{"@id":"https:\/\/bhargavs.com\/#website"},"datePublished":"2017-04-18T03:29:45+00:00","breadcrumb":{"@id":"https:\/\/bhargavs.com\/index.php\/2017\/04\/17\/remotely-accessing-admin-shares-on-windows-10\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/bhargavs.com\/index.php\/2017\/04\/17\/remotely-accessing-admin-shares-on-windows-10\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/bhargavs.com\/index.php\/2017\/04\/17\/remotely-accessing-admin-shares-on-windows-10\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/bhargavs.com\/"},{"@type":"ListItem","position":2,"name":"Remotely accessing admin shares on Windows 10"}]},{"@type":"WebSite","@id":"https:\/\/bhargavs.com\/#website","url":"https:\/\/bhargavs.com\/","name":"Bhargav's IT Playground","description":"Passion for Technology. Power of Collaboration.","publisher":{"@id":"https:\/\/bhargavs.com\/#\/schema\/person\/28f6d8c9b29f3a879483d65fc2ab5e26"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/bhargavs.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":["Person","Organization"],"@id":"https:\/\/bhargavs.com\/#\/schema\/person\/28f6d8c9b29f3a879483d65fc2ab5e26","name":"Bhargav","logo":{"@id":"https:\/\/bhargavs.com\/#\/schema\/person\/image\/"},"sameAs":["https:\/\/bhargavs.com"]}]}},"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_likes_enabled":true,"jetpack_sharing_enabled":true,"jetpack-related-posts":[{"id":483,"url":"https:\/\/bhargavs.com\/index.php\/2012\/11\/16\/exchange-2013-setup-client-access-server-role-readiness-check-fails\/","url_meta":{"origin":1708,"position":0},"title":"Exchange 2013 Setup – Client Access server role readiness check fails","author":"Bhargav","date":"November 16, 2012","format":false,"excerpt":"When installing Exchange 2013 servers in complex lab scenario, I decided to separate Mailbox and Client Access server roles to dedicated servers running Windows Server 2012. I installed Mailbox server role first and then proceeded to install Client Access role. Since Mailbox server role installed fine using setup UI and\u2026","rel":"","context":"In "Exchange 2013"","block_context":{"text":"Exchange 2013","link":"https:\/\/bhargavs.com\/index.php\/category\/microsoft\/exchange-server\/exchange-2013\/"},"img":{"alt_text":"image","src":"https:\/\/i0.wp.com\/bhargavs.com\/wp-content\/uploads\/2012\/11\/image_thumb3.png?resize=350%2C200&ssl=1","width":350,"height":200},"classes":[]},{"id":1694,"url":"https:\/\/bhargavs.com\/index.php\/2013\/05\/10\/sql-server-2012-install-error-enabling-windows-feature-netfx3\/","url_meta":{"origin":1708,"position":1},"title":"SQL Server 2012 install error enabling Windows Feature NetFx3","author":"Bhargav","date":"May 10, 2013","format":false,"excerpt":"While creating one of many Lync scenario labs, I chose to install SQL Server 2012 instead of my usual install of SQL 2008 on Windows Server 2012. Going about my happy routine after clicking install, I expected install to complete when I returned a few hours later. Murphy never fails\u2026","rel":"","context":"In "Windows"","block_context":{"text":"Windows","link":"https:\/\/bhargavs.com\/index.php\/category\/microsoft\/windows\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":1688,"url":"https:\/\/bhargavs.com\/index.php\/2013\/03\/13\/error-0x800f0906-adding-gui-features-on-windows-server-2012-core\/","url_meta":{"origin":1708,"position":2},"title":"Error: 0x800f0906 Adding GUI features on Windows Server 2012 Core","author":"Bhargav","date":"March 13, 2013","format":false,"excerpt":"I have always preferred to have least amount of overhead possible when running Server workloads. For the same reason my Hyper-V lab infrastructure is configured to run Windows Server 2012 Core. There are times however, when you may want to have GUI. So I set out to configure one of\u2026","rel":"","context":"In "PowerShell"","block_context":{"text":"PowerShell","link":"https:\/\/bhargavs.com\/index.php\/category\/microsoft\/powershell\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":1687,"url":"https:\/\/bhargavs.com\/index.php\/2013\/01\/28\/vamt-unable-to-connect-to-wmi-service-on-remote-machine\/","url_meta":{"origin":1708,"position":3},"title":"VAMT unable to connect to wmi service on remote machine","author":"Bhargav","date":"January 28, 2013","format":false,"excerpt":"If you are Microsoft\u2019s volume license customer or an MSDN subscriber, the question of tracking usage of your volume license activation may have surfaced. You may already know what Volume Activation Management Tool (VAMT) is. If you aren\u2019t, you can read more about it here. \u00a0 Since I often build\u2026","rel":"","context":"In "Firewall"","block_context":{"text":"Firewall","link":"https:\/\/bhargavs.com\/index.php\/category\/technology\/firewall\/"},"img":{"alt_text":"image","src":"https:\/\/i0.wp.com\/bhargavs.com\/wp-content\/uploads\/2013\/01\/image_thumb.png?resize=350%2C200&ssl=1","width":350,"height":200},"classes":[]},{"id":200,"url":"https:\/\/bhargavs.com\/index.php\/2009\/11\/18\/script-to-install-exchange-2010-pre-requisites-for-windows-server-2008-r2\/","url_meta":{"origin":1708,"position":4},"title":"Script to install Exchange 2010 pre-requisites for Windows Server 2008 R2","author":"Bhargav","date":"November 18, 2009","format":false,"excerpt":"Even though installing pre-requisites on Windows Server 2008 R2 is simple and straight forward as described here, it makes it even faster if you were to use a script to do so. MVP Anderson Patricio recently published a script for the same. What the script did not do is what\u2026","rel":"","context":"In "Exchange 2010"","block_context":{"text":"Exchange 2010","link":"https:\/\/bhargavs.com\/index.php\/category\/microsoft\/exchange-server\/exchange-2010\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":134,"url":"https:\/\/bhargavs.com\/index.php\/2009\/06\/22\/exctrlstexe-missing-performance-coutners\/","url_meta":{"origin":1708,"position":5},"title":"Exctrlst.exe – The case of missing Performance Coutners","author":"Bhargav","date":"June 22, 2009","format":false,"excerpt":"Recently I wrote about how to fix Corrupt of Missing Performance Coutners on a Windows Server. If you read the KB Article mentioned, it may sound complicated. One of the steps is to go through registry and find all services that have performance subkey. This could be very time consuming\u2026","rel":"","context":"In "Windows Server"","block_context":{"text":"Windows Server","link":"https:\/\/bhargavs.com\/index.php\/category\/microsoft\/windows\/windows-server\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]}],"jetpack_shortlink":"https:\/\/wp.me\/pkROc-ry","_links":{"self":[{"href":"https:\/\/bhargavs.com\/index.php\/wp-json\/wp\/v2\/posts\/1708","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bhargavs.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/bhargavs.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/bhargavs.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/bhargavs.com\/index.php\/wp-json\/wp\/v2\/comments?post=1708"}],"version-history":[{"count":0,"href":"https:\/\/bhargavs.com\/index.php\/wp-json\/wp\/v2\/posts\/1708\/revisions"}],"wp:attachment":[{"href":"https:\/\/bhargavs.com\/index.php\/wp-json\/wp\/v2\/media?parent=1708"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/bhargavs.com\/index.php\/wp-json\/wp\/v2\/categories?post=1708"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/bhargavs.com\/index.php\/wp-json\/wp\/v2\/tags?post=1708"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}