Enable Remote Assistance in AD

  • Thread starter Thread starter Adam
  • Start date Start date
A

Adam

I want to enable Windows XP's Remote Assistance for all my users using a
Policy.

I loaded up GPMC on my XP machince and added the new System Administrative
Template to my Default Domain Policy.

After reboot, all of my XP machines now have the following registy
settings:

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal
Services]
"fAllowToGetHelp"=dword:00000001
"fAllowFullControl"=dword:00000001
"MaxTicketExpiry"=dword:0000001e
"MaxTicketExpiryUnits"=dword:00000002
"fAllowUnsolicited"=dword:00000001
"fAllowUnsolicitedFullControl"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal
Services\RAUnsolicit]
"emea\\domain admins"="emea\\domain admins"

Also when I look at the RSOP (logging) I can see the settings are applied
correctly.

However when looking at the Remote Assistance UI, neither "Allow RA
invitations to be sent from this computer" or Allow users to connect
remotely to this computer" are ticked. When I try to connect using the RDP
client I get a "the client could not connect to the computer" message.

I have two Windows 2000 DC's running the latest SP's. The Domain is running
in mixed mode. I have tried this on XP SP1 and SP2 machines and both behave
the same.

Anyone got any ideas of how to get RA working properly?

Thanks,

Adam
 
Hello Adam,

Upgrade Windows 2000 Group policy to Windows XP per:

Q307900 Upgrading Windows 2000 Group Policy for Windows XP
http://support.microsoft.com/support/kb/articles/q307/9/00.asp

Then enable one or more of the following policies:

Computer Configuration\Administrative Templates\System\Remote Assistance:
Solicited Remote Assistance or Offer Remote Assistance

Then to actually force RDP to be enabled on a Windows XP Professional
Machine
(Disabled by default) you must set the following policy to "DISABLED"

Computer Configuration\Administrative Templates\Windows Components\Terminal
Services\Do Not Allow New Client Connections.

Set this to "Disabled" and run GPUPDATE on the XP client. You can verify
that it
has been enabled by right clicking on "My computer" and choosing
properties,
clicking on the Remote Tab and checking that the "Allow users to connect
remotely
to this computer" is greyed out and checked.

Here is some more information
==========================
How to configure a computer to receive Remote Assistance offers in Windows
XP
http://support.microsoft.com/default.aspx?scid=KB;EN-US;301527

This posting is provided "AS IS" with no warranties, and confers no rights.

Diana
 
Back
Top