Solved

Remote Assistance - "Current Settings prevent assistance...."

Posted on 2007-11-24
17
1,796 Views
Last Modified: 2012-08-13
Hi,
this is a continuation of the question here -

http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Windows/XP/Q_22933207.html

if someone can answer this, they can get points from both questions.
0
Comment
Question by:chrismarx
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 7
  • 3
  • 2
  • +2
17 Comments
 
LVL 29

Expert Comment

by:Alan Huseyin Kayahan
ID: 20342792
  Hi chrismarx
       Lets make a fresh start.  
         *You want to send an invitation but you get "Your current system settings prevent you from sending an invitation" correct?
         *Is this computer in a domain? Affected by any GPO?
         *Is currently logged on user a member of Administrators group of local computer?
         *Is "Remote Assistance" enabled in My Compuer properties>Remote ?
          If the computer is in a domain, apply the following GPO change on the GPO of OU which has your currently logged on user. If the computer is not in a domain, simply Start>run>gpedit.msc

        Computer Configuration>Administrative Templates>System>Remote Assitance
        *In right-pane, double-click "Offer remote assistance" and set it to enabled.
        *In drop-down box choose "Allow helpers to remotely control the computer"
        *Click show next to helpers, click add, then enter the currently logged on username

Apply, then run gpupdate /force. Computer reboot may be needed for GPO take effect

Regards
0
 
LVL 8

Expert Comment

by:JSoup
ID: 20342826
LogMeIn Free   http://www.pcworld.com/downloads/file/fid,24507-order,1-page,1-c,alldownloads/description.html
What is LogMeIn and why do I need it?

LogMeIn lets you access your Windows PC from anywhere in the world. All you need is a computer connected to the Internet. You see your Target PC's full desktop and control everything on it—applications, network files, email, printing—without the hassle of further downloads or installations. You can even share files that are too large for email. There's no need to lug around a laptop, because LogMeIn lets you access your PC from an internet cafe, an airport, or a hotel business center. You can even print documents you've accessed remotely.
Why do we offer LogMeIn Free? Because we can.
https://secure.logmein.com/welcome/get_logmein_free/why_is_it_free.asp
0
 
LVL 7

Accepted Solution

by:
jax79sg earned 500 total points
ID: 20343140
It seems that most of the obvious settings have been tried and tested to no avail.
I have a couple of possibilities, you may want to try it out.

The previous administrator may have 'hardened' your server in some manner which causes this. Try to grab hold of him/her to verify if possible. If that can't be done, we can try sniffing through the following.

Run 'services.msc'
Check if those services that relate to 'Remote ***' are at least set to Manual. Also look through the rest and see if there are other explitcitly disabled services. Note: Some administrators took the pain of removing services from the list during the hardening process, if this is the case you may have to look thru the web for the actual dependencies for the Remote Assistance feature.

Open 'Users/Groups'
Check that you have a remote desktop users group.

Check ('Local) Security Policies' in Administrative Tools.
Check that 'Allow logon through Terminal Services' has Remote Desktop Users.
Checj that 'Access this computer from network' has the essential logon groups or names.
Look through the list and see if there's anything you feel is not really right.

Hope this helps.
0
Manage your data center from practically anywhere

The KN8164V features HD resolution of 1920 x 1200, FIPS 140-2 with level 1 security standards and virtual media transmissions at twice the speed. Built for reliability, the KN series provides local console and remote over IP access, ensuring 24/7 availability to all servers.

 
LVL 8

Expert Comment

by:JSoup
ID: 20343359
0
 

Expert Comment

by:code4pc
ID: 20367065
Is Windows Messenger allowed to run in the domain?
0
 

Author Comment

by:chrismarx
ID: 20367901
i will try these/find out and get back shortly
0
 

Author Comment

by:chrismarx
ID: 20368267
jax79sg:

ok, heres what i've found out.

1.  the remote desktop help session manager was set to manual , but was not started. starting it had no effect.
2. one of the dependencies for that is the Remote Procedure Call (RPC), which is set to automatic, and i do not seem to be able to change from the services panel
3. in the local security settings, there is no "Allow logon through Terminal Services" policy, only a "Deny logon through Terminal Services"

any ideas?

(ps. i havent heard anyone saying they couldnt use windows messenger...)
0
 
LVL 29

Expert Comment

by:Alan Huseyin Kayahan
ID: 20368351
chris did you have time to check my steps?
0
 

Author Comment

by:chrismarx
ID: 20368538
whoops, sorry, here goes:

1. yes, thats the message i get
2. it is on a domain. how would i check if its being affected by a group policy?
3. yes, logged on user is member of admin
4. yes, remote assistance is enabled
5. im assuming the gpo is not something i change here, correct?
0
 
LVL 29

Expert Comment

by:Alan Huseyin Kayahan
ID: 20368787
  GPO is group policy, that you should change as I mentioned. And you can do it in serverside with domain admin rights.
    *Do you have domain admin rights?
    *Is the user and computer object in an OU? If yes, are there any GPOs linked?

0
 

Author Comment

by:chrismarx
ID: 20369634
ok, i had to add the group policy snap-in. i enabled the remote services. I ran the gpudate, and it said that the computer policy refresh has completed,
certain user policies are enabled that can only run during logon.
ok to logoff?

i selected no, because i wasnt ready to reboot, but i did reboot a little later, and still no go, same message. i have to say, its amazing how many ways this service can be disabled-
0
 

Author Comment

by:chrismarx
ID: 20514394
I'm still trying to solve this problem, what would you recommend i do?
0
 

Author Comment

by:chrismarx
ID: 20514534
oy, this will be the second time for this question...
0
 

Author Closing Comment

by:chrismarx
ID: 31410769
Yes, it appears there were server settings disabling this, nothing to do with my own local comp-
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A common practice in small networks is making file sharing easy which works extremely well when intra-network security is not an issue. In essence, everyone, that is "Everyone", is given access to all of the shared files - often the entire C: drive …
Resolve DNS query failed errors for Exchange
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

691 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question