Last year we migrated one of our customers infrastructure to Windows Server 2016 Standard. When logged into a workstation as a standard user and if you try to connect to an administrative share on the file server such as C$ and Admin$ you get an error message stating you don't have permission to access this resource when elevating as a domain administrator. I can connect to the administrative shares on any of the other new servers running the same OS e.g. domain controllers and member servers from workstations as standard users and elevating and it works fine. When logged into a workstation as a domain administrator it works fine. I have tried adding the following key and then rebooting but the issue persisted:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system
On the Edit menu, point to New, and then click DWORD Value.
Type LocalAccountTokenFilterPolicy for the name of the DWORD,and then press ENTER.
Right-click LocalAccountTokenFilterPolicy, and then click Modify.
In the Value data box, type 1, and then click OK.