#win2012

We have a bunch of newer, Win 2012 servers, all of which are not on an active directory domain. Because of this, we have local accounts across the servers with matching credentials. This works for most things like shared folders, but the one place where this isn’t sufficient is remote admin tasks, like running a scheduled task or remote restarting. This is because of Windows ACL, to get around this without Active Directory Domains, you need a special registry entry

here is the command to add the registry entry via powershell

New-ItemProperty -Name LocalAccountTokenFilterPolicy -path HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System -propertyType DWord -value 1

or go into regedit and make it yourself

go to  HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System

make a new key  LocalAccountTokenFilterPolicy

make it a DWORD and the value 1

setting this on your machine should allow remote machines to perform admin tasks if they have the same admin login 

if you also would like to add the remote server to the fancier ‘Server Manager’ App included in win 2012 server, you can use this command