Remote Assistance - "Current Settings prevent assistance...."

Posted on 2007-11-24
Medium Priority
Last Modified: 2012-08-13
this is a continuation of the question here -


if someone can answer this, they can get points from both questions.
Question by:chrismarx
  • 7
  • 3
  • 2
  • +2
LVL 29

Expert Comment

by:Alan Huseyin Kayahan
ID: 20342792
  Hi chrismarx
       Lets make a fresh start.  
         *You want to send an invitation but you get "Your current system settings prevent you from sending an invitation" correct?
         *Is this computer in a domain? Affected by any GPO?
         *Is currently logged on user a member of Administrators group of local computer?
         *Is "Remote Assistance" enabled in My Compuer properties>Remote ?
          If the computer is in a domain, apply the following GPO change on the GPO of OU which has your currently logged on user. If the computer is not in a domain, simply Start>run>gpedit.msc

        Computer Configuration>Administrative Templates>System>Remote Assitance
        *In right-pane, double-click "Offer remote assistance" and set it to enabled.
        *In drop-down box choose "Allow helpers to remotely control the computer"
        *Click show next to helpers, click add, then enter the currently logged on username

Apply, then run gpupdate /force. Computer reboot may be needed for GPO take effect


Expert Comment

ID: 20342826
LogMeIn Free   http://www.pcworld.com/downloads/file/fid,24507-order,1-page,1-c,alldownloads/description.html
What is LogMeIn and why do I need it?

LogMeIn lets you access your Windows PC from anywhere in the world. All you need is a computer connected to the Internet. You see your Target PC's full desktop and control everything on it—applications, network files, email, printing—without the hassle of further downloads or installations. You can even share files that are too large for email. There's no need to lug around a laptop, because LogMeIn lets you access your PC from an internet cafe, an airport, or a hotel business center. You can even print documents you've accessed remotely.
Why do we offer LogMeIn Free? Because we can.

Accepted Solution

jax79sg earned 2000 total points
ID: 20343140
It seems that most of the obvious settings have been tried and tested to no avail.
I have a couple of possibilities, you may want to try it out.

The previous administrator may have 'hardened' your server in some manner which causes this. Try to grab hold of him/her to verify if possible. If that can't be done, we can try sniffing through the following.

Run 'services.msc'
Check if those services that relate to 'Remote ***' are at least set to Manual. Also look through the rest and see if there are other explitcitly disabled services. Note: Some administrators took the pain of removing services from the list during the hardening process, if this is the case you may have to look thru the web for the actual dependencies for the Remote Assistance feature.

Open 'Users/Groups'
Check that you have a remote desktop users group.

Check ('Local) Security Policies' in Administrative Tools.
Check that 'Allow logon through Terminal Services' has Remote Desktop Users.
Checj that 'Access this computer from network' has the essential logon groups or names.
Look through the list and see if there's anything you feel is not really right.

Hope this helps.
Keep up with what's happening at Experts Exchange!

Sign up to receive Decoded, a new monthly digest with product updates, feature release info, continuing education opportunities, and more.


Expert Comment

ID: 20343359

Expert Comment

ID: 20367065
Is Windows Messenger allowed to run in the domain?

Author Comment

ID: 20367901
i will try these/find out and get back shortly

Author Comment

ID: 20368267

ok, heres what i've found out.

1.  the remote desktop help session manager was set to manual , but was not started. starting it had no effect.
2. one of the dependencies for that is the Remote Procedure Call (RPC), which is set to automatic, and i do not seem to be able to change from the services panel
3. in the local security settings, there is no "Allow logon through Terminal Services" policy, only a "Deny logon through Terminal Services"

any ideas?

(ps. i havent heard anyone saying they couldnt use windows messenger...)
LVL 29

Expert Comment

by:Alan Huseyin Kayahan
ID: 20368351
chris did you have time to check my steps?

Author Comment

ID: 20368538
whoops, sorry, here goes:

1. yes, thats the message i get
2. it is on a domain. how would i check if its being affected by a group policy?
3. yes, logged on user is member of admin
4. yes, remote assistance is enabled
5. im assuming the gpo is not something i change here, correct?
LVL 29

Expert Comment

by:Alan Huseyin Kayahan
ID: 20368787
  GPO is group policy, that you should change as I mentioned. And you can do it in serverside with domain admin rights.
    *Do you have domain admin rights?
    *Is the user and computer object in an OU? If yes, are there any GPOs linked?


Author Comment

ID: 20369634
ok, i had to add the group policy snap-in. i enabled the remote services. I ran the gpudate, and it said that the computer policy refresh has completed,
certain user policies are enabled that can only run during logon.
ok to logoff?

i selected no, because i wasnt ready to reboot, but i did reboot a little later, and still no go, same message. i have to say, its amazing how many ways this service can be disabled-

Author Comment

ID: 20514394
I'm still trying to solve this problem, what would you recommend i do?

Author Comment

ID: 20514534
oy, this will be the second time for this question...

Author Closing Comment

ID: 31410769
Yes, it appears there were server settings disabling this, nothing to do with my own local comp-

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

The Need In an Active Directory enviroment, the PDC emulator provide time synchronization for the domain. This is important since Active Directory uses Kerberos for authentication.  By default, if the time difference between systems is off by more …
I'm a big fan of Windows' offline folder caching and have used it on my laptops for over a decade.  One thing I don't like about it, however, is how difficult Microsoft has made it for the cache to be moved out of the Windows folder.  Here's how to …
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

587 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question