Windows Forum

Ask something
Discussion Locked

XP Remote Asistance - admin permissions

0 helpful
5 replies

by Member 33509877 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I am looking at using XP remote assistance for fixing 1st line faults for 1400 users, some very remote (XP is about to be rolled out on all client machines).
All the literature I have read on RA tells me that the permissions on an assistance 'session' are determined by the end user's permissions, not the administrator's. As group policy is going to lock down the user's desktop, this makes providing a fix very difficult unless the helpdesk can take control of the PC with the appropriate admin rights. Any suggestions as to how the helpdesk can achieve this?

5 replies

by camareni

If you want to use the XP remote assistance, someone, needs to log in as administrator in teh remote computer. Once you do that they can go ahead and right click on my computer,properties, and go to remote and they should give the remote computer appropriate priviligies.

I hope this helps,

Renis

by Member 33509877

Can't use this - this is a secure domain, and users can't have knowledge of the admin password (even for the local machine)

by timwalsh

Employ Remote Desktop on your user's computers. Remote desktop is essentially the same as Terminal Services Remote Admin mode in Win2K Server.

Using Remote Desktop will allow an administrator to log on to a desktop with a session different from the current user's. This will allow the administrator to apply any fixes that require admin permissions. You should be able to open a Remote Desktop session at the same time that you have the Remote Assistance session open so that you can tell the user whether they need to do a log-off/log-on cycle or a reboot cycle for the fix to work.

The only other option (which may work in some circumstances and not in others) would be to use the RunAs... applet to perform certain tasks using administrator credentials vs. the current user.

Hope this helps.

by Member 33509877

I think this will do nicely - the logon requirements when creating a session look as though they should give me the appropriate permissions when logging onto the machine as an administrator. The fact that the user can't see the session is a bit of abonus too. Thanks, Tim - much appreciated.

This discussion is closed to new replies.