Registry Entry to Allow remote admin/management
We have a bunch of newer, Win 2012 servers, all of which are not on an active directory domain. Because of this, we have local accounts across the servers with matching credentials. This works for most things like shared folders, but the one place where this isn’t sufficient is remote admin tasks, like running a scheduled task or remote restarting. This is because of Windows ACL, to get around this without Active Directory Domains, you need a special registry entry
here is the command to add the registry entry via powershell
New-ItemProperty -Name LocalAccountTokenFilterPolicy -path HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System -propertyType DWord -value 1
or go into regedit and make it yourself
go to HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
make a new key LocalAccountTokenFilterPolicy
make it a DWORD and the value 1
setting this on your machine should allow remote machines to perform admin tasks if they have the same admin login
if you also would like to add the remote server to the fancier ‘Server Manager’ App included in win 2012 server, you can use this command
Set-Item wsman:\localhost\Client\TrustedHosts SERVER1 -Concatenate -Force