access ro remote computer via computer management

Question

access ro remote computer via computer management

MidNight Sender 66

In microsoft domain what requirements to connect remote computer via computer management ?

My client is Window 11 and I use AD account which belongs to local administrators group of remote computer (Windows 10)

When I open computer management to explore remote pc, I can explore partially tree, e.g. device manager cannot be opened.

What services are necessary to run on remote and local pc ?

What AD account I have to use ?

0 comments

Answer accepted by question author

Marcin Policht 107.3K MVP Volunteer Moderator

Requirements: the Windows 11 client and Windows 10 remote computer should be domain-joined or otherwise able to authenticate to the same AD domain, and your AD account must have local administrator rights on the remote computer. Remote administration must also be allowed through Windows Firewall. For Device Manager specifically, additional remote-management/RPC access is required; simply being a local administrator is not always sufficient.

Services: on the remote Windows 10 computer, make sure Remote Procedure Call (RPC), RPC Endpoint Mapper, and DCOM Server Process Launcher are running. For Device Manager and similar hardware-management functions, the Windows Management Instrumentation (WMI) service should also be running. On the client, the corresponding RPC/DCOM services are normally already running and generally do not need special configuration. Windows Firewall must allow the appropriate Remote Service Management, WMI, and RPC/DCOM rules.

AD account: use a domain account (DOMAIN\username or ******@domain.com) that is a member of the remote computer's local Administrators group. You do not need to use the Domain Admins group. If Computer Management opens but Device Manager fails, first verify that the account is actually being recognized as a local administrator on the remote Windows 10 machine and that the WMI/RPC/firewall requirements are satisfied.

If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

hth

Marcin

MidNight Sender 66 Reputation points

2026-08-12T05:41:59.04+00:00
both the Windows 11 client and Windows 10 remote computer are AD domain-joined

I use domain account account which is a member of the remote computer's local Administrators group.

Windows Firewall is disable on remote client (Windows 11 25H2)

emote Procedure Call (RPC) service is running on remote client

RPC Endpoint Mapper is running on remote client

DCOM Server Process Launcher is running on remote client

the Windows Management Instrumentation (WMI) service is running on remote client

As @Allan Solomon Mejia said:

Microsoft removed remote access to the Plug and Play (PnP) RPC interface beginning with Windows 8 and Windows Server 2012.

If I understand right I have no possibility to access to "device manager" by computer management if I use Windows 10/11. Right ?
Marcin Policht 107.3K Reputation points MVP Volunteer Moderator

2026-08-12T12:50:41.9333333+00:00

Confirmed - that's actually documented inhttps://learn.microsoft.com/en-us/troubleshoot/windows-server/system-management-components/error-connect-device-manager-remotely

A potentially suitable alternative (with obvious downside of not having graphical interface) might be PowerShell Remoting (Get-PnpDevice, Disable-PnpDevice, etc.). More at https://learn.microsoft.com/en-us/powershell/module/pnpdevice/?view=windowsserver2025-ps

If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

hth

Marcin
Allan Solomon Mejia 8,175 Reputation points

2026-08-12T14:20:52.2966667+00:00

Hello @MidNight Sender

Please let us know if you need any further assistance. Otherwise, if the information provided has resolved your issue, please consider clicking “Accept Answer” to help others who may encounter the same problem.

Thank you!

1 additional answer

Your answer

MidNight Sender 66 Reputation points

2026-08-12T05:41:59.04+00:00

both the Windows 11 client and Windows 10 remote computer are AD domain-joined

I use domain account account which is a member of the remote computer's local Administrators group.

Windows Firewall is disable on remote client (Windows 11 25H2)

emote Procedure Call (RPC) service is running on remote client

RPC Endpoint Mapper is running on remote client

DCOM Server Process Launcher is running on remote client

the Windows Management Instrumentation (WMI) service is running on remote client

As @Allan Solomon Mejia said:

Microsoft removed remote access to the Plug and Play (PnP) RPC interface beginning with Windows 8 and Windows Server 2012.

If I understand right I have no possibility to access to "device manager" by computer management if I use Windows 10/11. Right ?
Marcin Policht 107.3K Reputation points MVP Volunteer Moderator

2026-08-12T12:50:41.9333333+00:00

Confirmed - that's actually documented inhttps://learn.microsoft.com/en-us/troubleshoot/windows-server/system-management-components/error-connect-device-manager-remotely

A potentially suitable alternative (with obvious downside of not having graphical interface) might be PowerShell Remoting (Get-PnpDevice, Disable-PnpDevice, etc.). More at https://learn.microsoft.com/en-us/powershell/module/pnpdevice/?view=windowsserver2025-ps

If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

hth

Marcin
Allan Solomon Mejia 8,175 Reputation points

2026-08-12T14:20:52.2966667+00:00

Hello @MidNight Sender

Please let us know if you need any further assistance. Otherwise, if the information provided has resolved your issue, please consider clicking “Accept Answer” to help others who may encounter the same problem.

Thank you!

Answer 1

Hello @MidNight Sender

Since both computers are domain-joined and your AD account is already a member of the local Administrators group on the remote Windows 10 PC, your account should generally be sufficient for the Computer Management functions that support remote administration.

For remote Computer Management, verify that the remote PC allows the necessary Windows Firewall management rules and that services used by the particular MMC snap-in, such as RPC/WMI, are available. Remote WMI connections, for example, are affected by Windows Firewall, DCOM, and UAC configuration.

However, Device Manager is the exception here. Microsoft removed remote access to the Plug and Play (PnP) RPC interface beginning with Windows 8 and Windows Server 2012. As a result, Device Manager can't be remotely accessed this way on a Windows 10 target, even when Plug and Play and Remote Registry are running and your account has administrative rights.

So the fact that other parts of Computer Management work but Device Manager returns Access Denied or doesn't open is expected behavior, not necessarily a permissions or service problem.

For Device Manager, Microsoft states that you must access it locally on the target computer. You can accomplish that by using RDP or another approved remote-control method and then running: devmgmt.msc

For the other Computer Management snap-ins, I would troubleshoot them individually because each component can have different RPC/WMI/firewall requirements rather than enabling services indiscriminately.

Please "Accept the Answer" if this information helped you. This will help us and others in the community as well.