can only access administrative shares on server 2019 machine with the default "Administrator" account

Question

_{Thursday, January 9, 2020 5:51 PM}

Hello,

I have a server 2019 machine isolated in a DMZ.  It is not part of a domain.

I am able to access the administrative share for c$ and f$ on the machine when I log in with the "machinename\administrator" account and password.

I created a new administrator account on the server and put it in the administrators group only.

I can remote desktop to this machine using the newly created account name, but I cannot access the administrative shares using this account.  I'm using the local machine name as the domain and am sure the username and password are correct.

What must I do to grant administrative share access to this new account?

thank you

Patrick

All replies (3)

_{Friday, January 10, 2020 1:57 PM ✅Answered}

figured it out from this:

https://www.repairwin.com/enable-admin-shares-windows-10-8-7/

Add the "LocalAccountTokenFilterPolicy" value in registry at 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System DWORD (32-bit) value set to 1.

Tried this and it worked.  But decided to create a regular share instead for security purposes.

_{Friday, January 10, 2020 7:36 AM}

Hi,

You can download the RSAT (Remote Server Administration Tools）from Microsoft, and run the following command:

netdom resetpwd /s:<servername> /ud:<domainname>\username> /pd:*

Just check if it helps. Have a nice day!

Regards,

Kiki

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].

_{Monday, January 13, 2020 1:36 AM}

Hi,

I am very glad to hear that this problem has been solved. Thank you for sharing. We are very grateful for your time and effort.

Have a nice day!

Kiki

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].