Moving through the network

  • Local administrator accounts may be repeated across multiple hosts on the network. Even if that is the case a local administrator cannot access a computer remotely with admin privileges using WinRM, SMB, or RPC. The local administrator must use RDP to open an administrative session on a host. This setting can be changed.

  • The built-in default administrator account is not subject to UAC, while other local administrator accounts are.

  • Domain accounts with local admin can open an administrative login using RDP, WinRM, SMB, or RPC. This can be disabled.