Introduction: Even when UAC (User Account Control) is turned off locally, remotely executed commands still may not be run with Administrator permissions, especially on non-domain machines.  Remote UAC may also prevent access to admin shares.  The following describes how to disable remote UAC.

 

Procedure:

  1. Open regedit.exe (as Administrator)
  2. Navigate to "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" 
  3. Right-click in the blank area in the right pane and select New > DWORD Value
  4. Name the new value "LocalAccountTokenFilterPolicy"
  5. Double-click on the newly created "LocalAccountTokenFilterPolicy" value
  6. Type 1 into the "Value data" entry and click OK
  7. Reboot the computer