EXECUTE denied, but only when I'm connected locally
Your login is Windows login, so it can get its permissions from different Windows groups.

You loose some of them when logging locally, this usually happen when you launch SSMS not as administrator: you are still a member of BUILTIN\Administrators but UAC strips out your rights.

You should execute the following code in both cases: when you are logging remotely and locally, and check if in usage you see DENY ONLY when logging locally:

select distinct name, type, usage
from sys.login_token
where principal_id &gt; 0


What to do next depends on what you see as the results.
If you see BUILTIN\Administrators DENY ONLY just run your SSMS as administrator.
If there is some other difference in the results, please post it here.