Solved

Offer Remote Assistance - Permission Denied

Posted on 2006-11-17
23
3,942 Views
Last Modified: 2012-06-27
We have a Windows Server 2003 domain with several users which are 'Offer Remote Assistance Helpers'

One of the users had a problem with group policies and had to be deleted then re-added to the domain.

This user now gets a 'Permission Denied' error when trying to offer help.

We have followed several MS documents and tried removing then re-adding the user from the group policy but still issue persists.

I know it probably something to do with the old GUID for the user being present somewhere but where?

The other Remote Assistance Helpers still work perfectly.

Any help or suggestions would be greatly appreciated.

Thanks
0
Comment
Question by:Guy_Adams
  • 9
  • 5
  • 5
  • +1
23 Comments
 
LVL 38

Expert Comment

by:younghv
ID: 17965340
Hi Guy_Adams,
Have you tried just creating an entirely new user account for that user (different name)?
You are probably right that something somewhere has glitched up that old user name and maybe someone here will have a quick solution.

You may be able to get ahead of the game by just creating an entirely new account, check to make sure it is functional and get the user back in the Help business.


Vic
0
 
LVL 2

Author Comment

by:Guy_Adams
ID: 17965918
Vic,

Many thanks for your suggestion.

I have setup a temp user account for this person which allows him to be a helper, but it is annoying the hell out of me and probably him that he has to log out of one account and into another!!

Thanks

0
 
LVL 38

Expert Comment

by:younghv
ID: 17966129
Until a better answer comes along, can he log in with his regular account and then use the 'Run As' command to do the Help Desk stuff?
(Still not a good answer, but will make his life easier.)

Vic
0
 
LVL 2

Author Comment

by:Guy_Adams
ID: 17966732
Unfortunatley you can't run Help & Support under a different user account!

Its not too much of a problem it just bugs me, I dont like leaving issues like this.

Thanks for your response.
0
 
LVL 66

Expert Comment

by:johnb6767
ID: 17967670
Just an aside, you can run Help and support from a Runas, if executed directly from C:\WINDOWS\pchealth\helpctr\binaries\helpctr.exe
0
 
LVL 66

Expert Comment

by:johnb6767
ID: 17967682
Silly question though...he is getting denied when attempting this request from his own machine, right? If so, can another user do it from that same machine?
0
 
LVL 38

Expert Comment

by:younghv
ID: 17968099
I read earlier about 'mandatory' passwords (non-blank) for Remote assistance.
This guy didn't 'blank out' his password did he?

Vic
0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 17968757
If this is SBS, then you need to run the Change User Permissions wizard and reapply the appropriate template (Administrators or Power Users) to this user account to fix their permissions.

Jeff
TechSoEasy
0
 
LVL 2

Author Comment

by:Guy_Adams
ID: 17969341
johnb6767, I will set him a shortcut up on Monday so he can 'Run As' the other account I have set up for him. Also under his normal user account he cant offer remote assistance from any PC in the domain.

Jeff, The account was originally created on an SBS server which has been migrated to Windows Server 2003 using a transition pack....do you think this could be the cause of the issue?

Thanks all for your replies.
0
 
LVL 2

Author Comment

by:Guy_Adams
ID: 17969352
Also younghv, there is a strong password policy on the domain so no his password is not blank.

Thanks
0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 17969475
It could very well be that problem.. why don't you just recreate the account?

Jeff
TechSoEasy
0
Complete VMware vSphere® ESX(i) & Hyper-V Backup

Capture your entire system, including the host, with patented disk imaging integrated with VMware VADP / Microsoft VSS and RCT. RTOs is as low as 15 seconds with Acronis Active Restore™. You can enjoy unlimited P2V/V2V migrations from any source (even from a different hypervisor)

 
LVL 38

Assisted Solution

by:younghv
younghv earned 167 total points
ID: 17969595
Guy,
If the 'temp' account is working, why not have him migrate all his stuff from the old profile to the new one?
That way he has everything from his old profile, plus the new account works for the Help Desk.

Vic
0
 
LVL 2

Author Comment

by:Guy_Adams
ID: 17978236
Many because of the naming convention of the user accounts.

As a temp measure I have setup a shortcut to the Help and Support executable with run with different account.

I would really like to know what it is which is causing the issue.

Thanks
0
 
LVL 74

Accepted Solution

by:
Jeffrey Kane - TechSoEasy earned 167 total points
ID: 17983131
Guy,

More than likely, the user account is corrupt and recreating it is your only option.  You can certainly recreate it with the same name if you like.

Jeff
TechSoEasy
0
 
LVL 66

Assisted Solution

by:johnb6767
johnb6767 earned 166 total points
ID: 17983210
Have you doublechecked the permissions on helpctr.exe? Just to make sure that nothing is corrupted, and that there is no accidental Deny entries for this user?
0
 
LVL 2

Author Comment

by:Guy_Adams
ID: 17985414
Jeff,

The user account when corrupt and had problems with a few things so I deleted it from the domain. Then recreated it and since he has not been able to 'Offer Remote Assistance'

I have removed the old GUID from the relevant groups and added the new user account but still get permission denied.

I think I will have to reside with the fact I wont be able to nail this and leave it when a run as shortcut...

Many thanks all
0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 17985454
Y'know... I wonder if it's related to this:  http://support.microsoft.com/kb/889248

Jeff
TechSoEasy
0
 
LVL 2

Author Comment

by:Guy_Adams
ID: 17995955
Jeff,

Thanks for your suggestion, I checked it out but none of the DCOM attributes where true for the XP clients which would normally receive help.

Think I will just had to 'workaround' this one.

Thanks again all, I have split the points.
0
 
LVL 38

Expert Comment

by:younghv
ID: 17996001
Guy,
Thank you for including me in the split.

It's a little scary when johnb and Jeff can't answer something on XP and Servers.

Vic
0
 
LVL 2

Author Comment

by:Guy_Adams
ID: 17996049
I think its one of those questions in which the workaround is usually sufficient.

Things that did work and now dont really bug me and hense why I posted the question here.

Many thanks for your help.
0
 
LVL 66

Expert Comment

by:johnb6767
ID: 17996304
Thanks Guy_Adams , wish we could have had a better answer......

LOL @ Vic....I wish I was that good....


0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 17997073
same here!  :-)  

But also, sometimes it's tough to have an answer without actually being able to delve into the server to see what's what.

Jeff
TechSoEasy
0
 
LVL 2

Author Comment

by:Guy_Adams
ID: 17997213
I'm certain its to do with the old GUID of the user, but I just dont know where or how to resolve it.

Thanks

0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
XP Install woes 17 95
Windows startup/shutdown date/time log 7 125
windows seems to be corrupt 10 69
OLD TECH - PKZIP Only Zips 7 Files 17 68
Are you unable to synchronize your OST (Offline Storage Table) file with Microsoft Exchange Server? Is your OST file exceeding 2 GB size limit? In Microsoft Outlook 2002 and earlier versions, there is a 2 GB size limit for the OST file. If the file …
When you start your Windows 10 PC and got an "Operating system not found" error or just saw  "Auto repair for startup" or a blinking cursor with black screen. A loop for Auto repair will start but fix nothing.  You will be panic as there are no back…
This tutorial demonstrates a quick way of adding group price to multiple Magento products.
This is a video describing the growing solar energy use in Utah. This is a topic that greatly interests me and so I decided to produce a video about it.

930 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now