Rexxer

Some tips for me and other

Remote Assistance suddenly stop working

I met a strange issue with Remote Assistance: I couldn’t connect with msra to several PCs. But it worked before.

After some investigation I found that if my user in the Local Administrators group – it works. After googling I supposed it’s related to DCOM and found this: https://support.microsoft.com/en-us/kb/884910

So, the resolution for me was adding my users to DCOM: Machine Access … policy in my GPO and grant all permissions for it.

Modify the Group Policy where you enabled the DCOM security-related policies, and then add the Remote Assistance Helpers group with both local and remote access permissions. To do this, follow these steps:

  1. Open the Group Policy object. To do this on the local Windows computer, click Start, click Run, type gpedit.msc, and then click OK.

  2. Expand Computer Configuration, expand Windows Settings, expand Security Settings, expand Local Policies, and then click Security Options.

  3. Double-click DCOM: Machine Access Restrictions in Security Descriptor Definition Language (SDDL) syntax if this policy is enabled.

  4. Click Edit Security, and then click Add.

  5. Click Locations, click your domain, and then click OK.

  6. Type Remote Assistance Helpers, click Check Names, and then click OK.

  7. Click to select the Remote Access check box in the Allow column, and then click OK.

  8. Click Apply, and then click OK.

  9. Double-click DCOM: Machine Launch Restrictions in Security Descriptor Definition Language (SDDL) syntax if this policy is enabled.

  10. Follow steps d through f to add the Remote Assistance Helpers security group to this policy.

  11. Click to select all the check boxes in the Allow column, and then click OK.
  12. Click Apply, and then click OK.
  13. Close the Group Policy Object Editor snap-in.

Comments are currently closed.