See
http://support.microsoft.com/?kbid=555179 for settings specific to Offer
Remote Assistance.
For Remote Desktop, see the setting Computer Configuration, Administrative
Templates, Network, Network Connections, Windows Firewall, [Domain|Standard]
Profile, Windows Firewall: Allow Remote Desktop.
If you haven't already, you will need to either edit the GPO via a Windows
XP SP2 desktop or update the.adm files with the XP SP2 versions (see for
example
http://www.microsoft.com/downloads/...4B-7112-4B6C-AD4A-BBF3802A5C9B&displaylang=en).
See also
http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/mangxpsp2/mngwfw.mspx
http://support.microsoft.com/default.aspx?scid=kb;en-us;816662
Offering Remote Assistance means that the "expert" sends the offer to the
"novice", who then gets a message box asking if they want to permit it
(there is no way to get control of the user's session without the users
permission). This is in contrast to the Solicited route where the "novice"
sends an "invitation" to the "expert" via email or instant messaging. Offer
is much simpler and quicker for use by Help Desk or other support staff - we
use it a lot.
To actually send an Offer of Remote Assistance, once it is enabled on the
target computer, use the following as the "target" in a shortcut:
hcp://CN=Microsoft%20Corporation,L=Redmond,S=Washington,C=US/Remote%20Assistance/Escalation/Unsolicited/unsolicitedrcui.htm
Offering Remote Assistance is discussed a bit in Windows XP's Help and
Support, but you have to actually "search" for "offer" to find it - there is
no index or table of contents entry for it.
See also
http://support.microsoft.com/default.aspx?scid=kb;en-us;826088
http://support.microsoft.com/default.aspx?scid=kb;en-us;310629
Remote Desktop is more like Terminal Services - you create the connection to
the other computer, logon and get a desktop. You can only do this if there
is no one logged on at the target computer (although you can force the other
person to be logged off if you are an administrator on that computer).