Security Tweaks - Allow Offer Remote Assistance

This tweak only works in an Active Directory environment. This allows a member of the group specified to solicit a remote assistance session. In a normal environment you would have to have the user request the session.

To change this, follow the next steps:

  1. Open the Registry Editor click on the Start button on your taskbar, then click on Run and type "regedit" and click on OK to start the regedit utility.
     
  2. Expand HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services (see picture 1).

    Picture 1
  3. Create a new DWORD value, or modify the existing value, called "fAllowUnsolicited" and "fAllowUnsolicitedFullControl" and edit the value according to the settings above.
     
  4. Expand HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services\RAUnsolicit (see picture 2).
     
    Picture 2
  5. Create a new STRING value, or modify the existing value, called "DOMAIN\\GROUP" or "DOMAIN\\USERNAME" and edit the value according to the settings above.
     
  6. The modifications you made will be in effect after you logout or reboot your PC.

 


Author:

Lex van der Horst

Date Added:

06-11-2004

Last Reviewed:

06-11-2004