Disabling Remote User Account Control for Workgroups

If you are monitoring a target in a workgroup, you must disable remote User Account Control (UAC). Although this is not recommended, it is necessary when monitoring a workgroup computer. Disabling remote user account control does not disable local user account control functionality.

[spacer]

The following modifies or creates a registry key. Changing the registry can have adverse effects on your computer and may result in an unbootable system. Best practice is to back up your registry before making these changes.

To disable remote UAC for a workgroup computer:

1. Log on to the host you want to monitor as an administrator.

2. Click Start > Run, and enter regedit.

3. Expand HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Current­Version\Policies\System.

4. Locate or create a DWORD entry named LocalAccountTokenFilterPolicy and provide a DWORD value of 1.

[spacer]

To re-enable remote UAC, change the DWORD value to 0.