Remote UAC Access Denied Errors – Local Account Token Filter Policy – Remote UAC Fix
If you are trying to use any remote tools like sysinternals against Windows Vista, 7 or 8.1 machines then you need to have remote UAC elevation privileges to enable you to carry out changes on the machine you are trying to amend.
However, you may find that you are still having problems with connecting to remote machines so if you are, there is a registry edit that you can make on the remote machine to enable Local Account Token Filter Policy.
To do this, on your target machine, do the following:
- Run regedit
- Go to the following registry subkey:
If LocalAccountTokenFilterPolicy DWORD entry does not exist, then do the following:
- Create a new DWORD value
- Call the DWORD value LocalAccountTokenFilterPolicy
- Enter in the value 1
If you would prefer to just run an installer to fix this error then we have created a MSI file which will do this fix for you. You can also use this MSI to push out to multiple machines.
There should not be any requirement to reboot your machine after this.
Now try your remote access tools and you should find that it will now work.
This is detailed by Microsoft at KB951016.