Remote Assistance - "Current Settings prevent assistance...."

Posted on 2007-11-24
Medium Priority
Last Modified: 2012-08-13
this is a continuation of the question here -


if someone can answer this, they can get points from both questions.
Question by:chrismarx
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 7
  • 3
  • 2
  • +2
LVL 29

Expert Comment

by:Alan Huseyin Kayahan
ID: 20342792
  Hi chrismarx
       Lets make a fresh start.  
         *You want to send an invitation but you get "Your current system settings prevent you from sending an invitation" correct?
         *Is this computer in a domain? Affected by any GPO?
         *Is currently logged on user a member of Administrators group of local computer?
         *Is "Remote Assistance" enabled in My Compuer properties>Remote ?
          If the computer is in a domain, apply the following GPO change on the GPO of OU which has your currently logged on user. If the computer is not in a domain, simply Start>run>gpedit.msc

        Computer Configuration>Administrative Templates>System>Remote Assitance
        *In right-pane, double-click "Offer remote assistance" and set it to enabled.
        *In drop-down box choose "Allow helpers to remotely control the computer"
        *Click show next to helpers, click add, then enter the currently logged on username

Apply, then run gpupdate /force. Computer reboot may be needed for GPO take effect


Expert Comment

ID: 20342826
LogMeIn Free   http://www.pcworld.com/downloads/file/fid,24507-order,1-page,1-c,alldownloads/description.html
What is LogMeIn and why do I need it?

LogMeIn lets you access your Windows PC from anywhere in the world. All you need is a computer connected to the Internet. You see your Target PC's full desktop and control everything on it—applications, network files, email, printing—without the hassle of further downloads or installations. You can even share files that are too large for email. There's no need to lug around a laptop, because LogMeIn lets you access your PC from an internet cafe, an airport, or a hotel business center. You can even print documents you've accessed remotely.
Why do we offer LogMeIn Free? Because we can.

Accepted Solution

jax79sg earned 2000 total points
ID: 20343140
It seems that most of the obvious settings have been tried and tested to no avail.
I have a couple of possibilities, you may want to try it out.

The previous administrator may have 'hardened' your server in some manner which causes this. Try to grab hold of him/her to verify if possible. If that can't be done, we can try sniffing through the following.

Run 'services.msc'
Check if those services that relate to 'Remote ***' are at least set to Manual. Also look through the rest and see if there are other explitcitly disabled services. Note: Some administrators took the pain of removing services from the list during the hardening process, if this is the case you may have to look thru the web for the actual dependencies for the Remote Assistance feature.

Open 'Users/Groups'
Check that you have a remote desktop users group.

Check ('Local) Security Policies' in Administrative Tools.
Check that 'Allow logon through Terminal Services' has Remote Desktop Users.
Checj that 'Access this computer from network' has the essential logon groups or names.
Look through the list and see if there's anything you feel is not really right.

Hope this helps.
Plug and play, no additional software required!

The ATEN UE3310 USB3.1 Gen1 Extender Cable allows users to extend the distance between the computer and USB devices up to 10 m (33 ft). The UE3310 is a high-quality, cost-effective solution for professional environments such as hospitals, factories and business facilities.


Expert Comment

ID: 20343359

Expert Comment

ID: 20367065
Is Windows Messenger allowed to run in the domain?

Author Comment

ID: 20367901
i will try these/find out and get back shortly

Author Comment

ID: 20368267

ok, heres what i've found out.

1.  the remote desktop help session manager was set to manual , but was not started. starting it had no effect.
2. one of the dependencies for that is the Remote Procedure Call (RPC), which is set to automatic, and i do not seem to be able to change from the services panel
3. in the local security settings, there is no "Allow logon through Terminal Services" policy, only a "Deny logon through Terminal Services"

any ideas?

(ps. i havent heard anyone saying they couldnt use windows messenger...)
LVL 29

Expert Comment

by:Alan Huseyin Kayahan
ID: 20368351
chris did you have time to check my steps?

Author Comment

ID: 20368538
whoops, sorry, here goes:

1. yes, thats the message i get
2. it is on a domain. how would i check if its being affected by a group policy?
3. yes, logged on user is member of admin
4. yes, remote assistance is enabled
5. im assuming the gpo is not something i change here, correct?
LVL 29

Expert Comment

by:Alan Huseyin Kayahan
ID: 20368787
  GPO is group policy, that you should change as I mentioned. And you can do it in serverside with domain admin rights.
    *Do you have domain admin rights?
    *Is the user and computer object in an OU? If yes, are there any GPOs linked?


Author Comment

ID: 20369634
ok, i had to add the group policy snap-in. i enabled the remote services. I ran the gpudate, and it said that the computer policy refresh has completed,
certain user policies are enabled that can only run during logon.
ok to logoff?

i selected no, because i wasnt ready to reboot, but i did reboot a little later, and still no go, same message. i have to say, its amazing how many ways this service can be disabled-

Author Comment

ID: 20514394
I'm still trying to solve this problem, what would you recommend i do?

Author Comment

ID: 20514534
oy, this will be the second time for this question...

Author Closing Comment

ID: 31410769
Yes, it appears there were server settings disabling this, nothing to do with my own local comp-

Featured Post

Connect further...control easier

With the ATEN CE624, you can now enjoy a high-quality visual experience powered by HDBaseT technology and the convenience of a single Cat6 cable to transmit uncompressed video with zero latency and multi-streaming for dual-view applications where remote access is required.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Trying to figure out group policy inheritance and which settings apply where can be a chore.  Here's a very simple summary I've written which might help.  Keep in mind, this is just a high-level conceptual overview where I try to avoid getting bogge…
It’s been over a month into 2017, and there is already a sophisticated Gmail phishing email making it rounds. New techniques and tactics, have given hackers a way to authentically impersonate your contacts.How it Works The attack works by targeti…
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question