Vitriol and Routing Tables » Windows Server 2008 http://www.raptorized.com Tales from the OSI layer 3 Wed, 08 Sep 2010 02:34:26 +0000 en hourly 1 Access administrative shares on Server 2008/Vista http://www.raptorized.com/2008/08/19/access-administrative-shares-on-server-2008vista/ http://www.raptorized.com/2008/08/19/access-administrative-shares-on-server-2008vista/#comments Tue, 19 Aug 2008 21:27:33 +0000 mr_daemon http://www.raptorized.com/?p=182 Quick windows tip again, if you find yourself unable to access the administrative shares (\\machine\c$, tasks, etc) on a Windows Server 2008 or Vista computer with UAC enabled, using the credentials of a local administrator — don’t panic. This is actually intended.

Turns out local administrators cannot elevate their privileges over the network, with UAC enabled.

Note that this doesn’t affect users in the Domain Admins group!

Now, you could do the dumb “neowin poweruser” thing and turn UAC off, or you could change this particular behavior in the registry. Navigate to:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System

And add a new DWORD named LocalAccountTokenFilterPolicy with a value of 1, and then reboot. It all should work.

Again, users with Domain Admin privileges are unaffected.

]]> http://www.raptorized.com/2008/08/19/access-administrative-shares-on-server-2008vista/feed/ 1