Forum Discussion
Local Administrator PSSession Access denied
I suggest you check this registry key value:
What account are you using?
Make sure the credentials you are using are a member of the target server's local administrators group. In some cases, WinRM also requires membership in the Remote Management Users group. If you are using a local user account that is not the built-in administrator account, you will need to enable the policy on the target machine by running the following command in PowerShell or at a Command Prompt as Administrator on the target machine:
REG ADD HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System /v LocalAccountTokenFilterPolicy /t REG_DWORD /d 1
- gtvmarkAug 30, 2019Copper Contributor
I've read that page and the local Administrator on the target machine is a member of the builtin administrators group.
Which cases does it need remote management group and how do I find this out?
Is there a log showing "this user attempted to login and I denied them because..."
I've read through the remote troubleshooting and I can't see anything incorrect with the setup, the groups are setup the same between the working and non working server but I can't work out what is wrong.
- objectclassJan 29, 2021Copper Contributor
- gtvmarkJan 29, 2021Copper Contributor
objectclass Unfortunately I had forgotten about this, I can't even remember which server I was having the issue with. I have a vague memory of something specific to that account on that machine, and adding another account, or putting a domain user into the Administrators group was the work around. I'm guessing that as I've forgotten about it, that I did manage to work around it.