Solved

Offer Remote Assistance - Permission Denied

Posted on 2006-11-17
23
3,952 Views
Last Modified: 2012-06-27
We have a Windows Server 2003 domain with several users which are 'Offer Remote Assistance Helpers'

One of the users had a problem with group policies and had to be deleted then re-added to the domain.

This user now gets a 'Permission Denied' error when trying to offer help.

We have followed several MS documents and tried removing then re-adding the user from the group policy but still issue persists.

I know it probably something to do with the old GUID for the user being present somewhere but where?

The other Remote Assistance Helpers still work perfectly.

Any help or suggestions would be greatly appreciated.

Thanks
0
Comment
Question by:Guy_Adams
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 9
  • 5
  • 5
  • +1
23 Comments
 
LVL 38

Expert Comment

by:younghv
ID: 17965340
Hi Guy_Adams,
Have you tried just creating an entirely new user account for that user (different name)?
You are probably right that something somewhere has glitched up that old user name and maybe someone here will have a quick solution.

You may be able to get ahead of the game by just creating an entirely new account, check to make sure it is functional and get the user back in the Help business.


Vic
0
 
LVL 2

Author Comment

by:Guy_Adams
ID: 17965918
Vic,

Many thanks for your suggestion.

I have setup a temp user account for this person which allows him to be a helper, but it is annoying the hell out of me and probably him that he has to log out of one account and into another!!

Thanks

0
 
LVL 38

Expert Comment

by:younghv
ID: 17966129
Until a better answer comes along, can he log in with his regular account and then use the 'Run As' command to do the Help Desk stuff?
(Still not a good answer, but will make his life easier.)

Vic
0
Online Training Solution

Drastically shorten your training time with WalkMe's advanced online training solution that Guides your trainees to action. Forget about retraining and skyrocket knowledge retention rates.

 
LVL 2

Author Comment

by:Guy_Adams
ID: 17966732
Unfortunatley you can't run Help & Support under a different user account!

Its not too much of a problem it just bugs me, I dont like leaving issues like this.

Thanks for your response.
0
 
LVL 66

Expert Comment

by:johnb6767
ID: 17967670
Just an aside, you can run Help and support from a Runas, if executed directly from C:\WINDOWS\pchealth\helpctr\binaries\helpctr.exe
0
 
LVL 66

Expert Comment

by:johnb6767
ID: 17967682
Silly question though...he is getting denied when attempting this request from his own machine, right? If so, can another user do it from that same machine?
0
 
LVL 38

Expert Comment

by:younghv
ID: 17968099
I read earlier about 'mandatory' passwords (non-blank) for Remote assistance.
This guy didn't 'blank out' his password did he?

Vic
0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 17968757
If this is SBS, then you need to run the Change User Permissions wizard and reapply the appropriate template (Administrators or Power Users) to this user account to fix their permissions.

Jeff
TechSoEasy
0
 
LVL 2

Author Comment

by:Guy_Adams
ID: 17969341
johnb6767, I will set him a shortcut up on Monday so he can 'Run As' the other account I have set up for him. Also under his normal user account he cant offer remote assistance from any PC in the domain.

Jeff, The account was originally created on an SBS server which has been migrated to Windows Server 2003 using a transition pack....do you think this could be the cause of the issue?

Thanks all for your replies.
0
 
LVL 2

Author Comment

by:Guy_Adams
ID: 17969352
Also younghv, there is a strong password policy on the domain so no his password is not blank.

Thanks
0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 17969475
It could very well be that problem.. why don't you just recreate the account?

Jeff
TechSoEasy
0
 
LVL 38

Assisted Solution

by:younghv
younghv earned 167 total points
ID: 17969595
Guy,
If the 'temp' account is working, why not have him migrate all his stuff from the old profile to the new one?
That way he has everything from his old profile, plus the new account works for the Help Desk.

Vic
0
 
LVL 2

Author Comment

by:Guy_Adams
ID: 17978236
Many because of the naming convention of the user accounts.

As a temp measure I have setup a shortcut to the Help and Support executable with run with different account.

I would really like to know what it is which is causing the issue.

Thanks
0
 
LVL 74

Accepted Solution

by:
Jeffrey Kane - TechSoEasy earned 167 total points
ID: 17983131
Guy,

More than likely, the user account is corrupt and recreating it is your only option.  You can certainly recreate it with the same name if you like.

Jeff
TechSoEasy
0
 
LVL 66

Assisted Solution

by:johnb6767
johnb6767 earned 166 total points
ID: 17983210
Have you doublechecked the permissions on helpctr.exe? Just to make sure that nothing is corrupted, and that there is no accidental Deny entries for this user?
0
 
LVL 2

Author Comment

by:Guy_Adams
ID: 17985414
Jeff,

The user account when corrupt and had problems with a few things so I deleted it from the domain. Then recreated it and since he has not been able to 'Offer Remote Assistance'

I have removed the old GUID from the relevant groups and added the new user account but still get permission denied.

I think I will have to reside with the fact I wont be able to nail this and leave it when a run as shortcut...

Many thanks all
0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 17985454
Y'know... I wonder if it's related to this:  http://support.microsoft.com/kb/889248

Jeff
TechSoEasy
0
 
LVL 2

Author Comment

by:Guy_Adams
ID: 17995955
Jeff,

Thanks for your suggestion, I checked it out but none of the DCOM attributes where true for the XP clients which would normally receive help.

Think I will just had to 'workaround' this one.

Thanks again all, I have split the points.
0
 
LVL 38

Expert Comment

by:younghv
ID: 17996001
Guy,
Thank you for including me in the split.

It's a little scary when johnb and Jeff can't answer something on XP and Servers.

Vic
0
 
LVL 2

Author Comment

by:Guy_Adams
ID: 17996049
I think its one of those questions in which the workaround is usually sufficient.

Things that did work and now dont really bug me and hense why I posted the question here.

Many thanks for your help.
0
 
LVL 66

Expert Comment

by:johnb6767
ID: 17996304
Thanks Guy_Adams , wish we could have had a better answer......

LOL @ Vic....I wish I was that good....


0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 17997073
same here!  :-)  

But also, sometimes it's tough to have an answer without actually being able to delve into the server to see what's what.

Jeff
TechSoEasy
0
 
LVL 2

Author Comment

by:Guy_Adams
ID: 17997213
I'm certain its to do with the old GUID of the user, but I just dont know where or how to resolve it.

Thanks

0

Featured Post

PeopleSoft Has Never Been Easier

PeopleSoft Adoption Made Smooth & Simple!

On-The-Job Training Is made Intuitive & Easy With WalkMe's On-Screen Guidance Tool.  Claim Your Free WalkMe Account Now

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Most of the time we are in fix when all of sudden our systems behave weirdly.  Such problems cost time and effort... so it's best to take some preventive actions so that we can avoid such issues or overcome such problems more easily. Preventive M…
Can you find a fax from a vendor you saved a decade ago in seconds? Have you ever cursed your PC under your breath during an audit because you couldn’t find the requested statement or driver history?  If you answered no to the first question or yes …
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question