{"id":694,"date":"2017-03-20T10:34:50","date_gmt":"2017-03-20T08:34:50","guid":{"rendered":"https:\/\/helia.ee\/koolitus\/?page_id=694"},"modified":"2017-03-20T10:44:09","modified_gmt":"2017-03-20T08:44:09","slug":"pdq-inventorydeploy-cant-access-admin-share-using-a-local-user-account","status":"publish","type":"page","link":"https:\/\/helia.ee\/koolitus\/?page_id=694","title":{"rendered":"PDQ inventory\/Deploy \u2013 Can\u2019t Access ADMIN$ Share Using A Local User Account"},"content":{"rendered":"<div id=\"content\" class=\"clearfix\">\n<article id=\"post-691\" class=\"post-691 page type-page status-publish hentry\">\n<div class=\"entry-content clearfix\">\n<header class=\"article-header clearfix\">\n<h1>Can\u2019t Access ADMIN$ Share Using A Local User Account<\/h1>\n<\/header>\n<div class=\"post-published meta\"><\/div>\n<div class=\"subtle-wrap\">\n<div class=\"content-body article-body\">\n<p><strong><span class=\"wysiwyg-font-size-x-large\">Purpose:<\/span><br \/>\n<\/strong>When supplying the appropriate user credentials that have local administrator access, you attempt to access a Windows Vista, Windows 7, Windows 8x, Windows 10, Server 2008 R2, or Server 2012\/2012 R2 computer and receive either the error, \u201c<strong>Access Denied \u2013 Failed to connect to ADMIN$ share<\/strong>\u201d or, \u201c<strong>Access to the path \u2018\\\\TARGET\\\\ADMIN$\u2019 is denied.<\/strong>\u201d<\/p>\n<p><strong><br \/>\n<span class=\"wysiwyg-font-size-x-large\">Resolution:<\/span><br \/>\n<\/strong>The resolution section assumes the following:<\/p>\n<ul>\n<li>Firewall Exceptions are set up correctly: <a href=\"http:\/\/support.adminarsenal.com\/hc\/en-us\/articles\/220533627\">http:\/\/support.adminarsenal.com\/hc\/en-us\/articles\/220533627<\/a>.<\/li>\n<li>File and Printer Sharing is enabled.<\/li>\n<li>GPO\/SRP or Antivirus is not blocking access to the ADMIN$.<\/li>\n<li>Using \\\\X.X.X.X\\ADMIN$, where X.X.X.X is the IP address of the target machine throwing the error, does <strong><em>not <\/em><\/strong>work.<\/li>\n<li>Appropriate credentials of local administrative user have been set (and tested).<\/li>\n<\/ul>\n<p>If the target computer is not a member of a Windows 2003 or later Active Directory domain, the most likely cause is that the target computer has Remote UAC enabled. Remote UAC prevents local administrative accounts from accessing ADMIN$ by preventing local admin accounts from running in an elevated mode from a network connection. To access ADMIN$ using a local account, Remote UAC will need to be disabled.<\/p>\n<p>To disable Remote UAC, an entry will need to be made in the registry of the affected target computer:<\/p>\n<p>Navigate to,<\/p>\n<pre><strong>HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System<\/strong><\/pre>\n<p>Create a <strong>DWORD<\/strong> value called <strong>LocalAccountTokenFilterPolicy<\/strong> and assign it a value of <strong>1<\/strong>.<\/p>\n<p>A reboot is recommended but not required, however, restarting the Server service is necessary.<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/support.adminarsenal.com\/hc\/en-us\/article_attachments\/209407748\/localaccount.png\" alt=\"\" \/><strong>NOTES:<br \/>\n<\/strong>* By default, when local credentials are used to access a Windows Vista (or later OS) system that is a member of a Windows Domain, this problem does not exist. Your Windows domain may still disable Remote UAC.<br \/>\n* Remote administrative access is denied to local accounts when a Windows Vista (or later OS) is NOT a member of a Windows 2003 or later domain.<\/p>\n<p><span class=\"wysiwyg-font-size-large\">Additional Troubleshooting:<\/span><\/p>\n<p><strong>Remote Repair Tool:<br \/>\n<\/strong>You can also use the Remote Repair tool to troubleshoot ADMIN$ (and other) issues. To use to the tool, select the troublesome machine, click <strong>Help<\/strong> on the main console menu and select <strong>Open Remote Repair<\/strong> (or press <strong>Ctrl<\/strong>+<strong>~<\/strong>).<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/support.adminarsenal.com\/hc\/en-us\/article_attachments\/209407788\/remote-good.png\" alt=\"\" \/><img decoding=\"async\" src=\"https:\/\/support.adminarsenal.com\/hc\/en-us\/article_attachments\/209494967\/remote-bad.png\" alt=\"\" \/><\/p>\n<p><strong>GPO and Scripts:<br \/>\n<\/strong>Check to make sure a GPO or a logon\/logoff script is not specifically denying access to the ADMIN$.<strong>\u00a0<\/strong><\/p>\n<p><strong>Administrative Shares are Missing:<br \/>\n<\/strong>In rare cases, the administrative shares are missing on the target machine(s). You can check to see if this is the case by running the following from a command prompt and reading the results,<strong>\u00a0<\/strong><\/p>\n<pre>net share<\/pre>\n<p><img decoding=\"async\" src=\"https:\/\/support.adminarsenal.com\/hc\/en-us\/article_attachments\/209495027\/net_share.png\" alt=\"\" \/><\/p>\n<p>If those shares are missing, you will need to recreate them. To do so, please see this article:<br \/>\n<a href=\"https:\/\/support.microsoft.com\/en-us\/kb\/245117\">https:\/\/support.microsoft.com\/en-us\/kb\/245117<\/a><\/p>\n<p><strong>Multiple Administrators:<br \/>\n<\/strong>In particular cases where more than one administrator is listed in PDQ\u2019s credentials, both administrators must have explicit administrative rights on the target machine as well as the PDQ console.<\/p>\n<p><strong>Malware or Virus:<br \/>\n<\/strong>In certain rare cases, a virus or malware could also cause interesting administrative share issues.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/article>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Can\u2019t Access ADMIN$ Share Using A Local User Account Purpose: When supplying the appropriate user credentials that have local administrator access, you attempt to access a Windows Vista, Windows 7, Windows 8x, Windows 10, Server 2008 R2, or Server 2012\/2012 R2 computer and receive either the error, \u201cAccess Denied \u2013 Failed to connect to ADMIN$ [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":698,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"class_list":["post-694","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/helia.ee\/koolitus\/index.php?rest_route=\/wp\/v2\/pages\/694","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/helia.ee\/koolitus\/index.php?rest_route=\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/helia.ee\/koolitus\/index.php?rest_route=\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/helia.ee\/koolitus\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/helia.ee\/koolitus\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=694"}],"version-history":[{"count":3,"href":"https:\/\/helia.ee\/koolitus\/index.php?rest_route=\/wp\/v2\/pages\/694\/revisions"}],"predecessor-version":[{"id":697,"href":"https:\/\/helia.ee\/koolitus\/index.php?rest_route=\/wp\/v2\/pages\/694\/revisions\/697"}],"up":[{"embeddable":true,"href":"https:\/\/helia.ee\/koolitus\/index.php?rest_route=\/wp\/v2\/pages\/698"}],"wp:attachment":[{"href":"https:\/\/helia.ee\/koolitus\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=694"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}