Can't connect to default admin share on Windows 2008

I have a Windows 2008 Server that I'm trying to connect to the default administrative share

\\servername\c$

I can connect to it using the default Administrator account. But if I try to connect using my user account that is a member of the Administrators group, I can't. What am I missing?

Yes, UAC is set up to not allow access to default shares remotely. To enable, create the LocalAccountTokenFilterPolicy DWORD value at this key in the registry

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\system\

0 - build filtered token (Remote UAC enabled)
1 - build elevated token (Remote UAC disabled)

By setting the DWORD entry to 1, you will be able to access the administrative shares since the remote logon token will not be filtered.

This is discussed in this KB article, http://support.microsoft.com/kb/947232. (It's for Vista but it applies to Windows Server 2008 R2)

You have User Access Control enabled. Disable it and try again.

If UAC is on, then being a member of the local Administrators group DOES NOT give you local administrator privileges.

JR

Re LocalAccountTokenFilterPolicy:

this registry setting does indeed allow all members of the local administrators group to use the admin shares C$, Admin$ etc, on Server 2008.

However if the ACL on a directory is "Administrators: Full control" then members of the local Administrators group (apart from Administrator) still do not have access to the directory even though the ACL grants them access. This is unaffected by the above registry setting.

Server 2008 handles things differently than it used to. You can't simply add yourself to the local administrators group on a member server. What I have found out is that you must give the domain admins group full control of the volume in questions and add yourself to the domain admins group. This has absolutely nothing to do with UAC from what I have experienced. I've turned it completely off during testing and still experienced this problem.