Solved

Remote Assistance - "Current Settings prevent assistance...."

Posted on 2007-11-24
17
1,784 Views
Last Modified: 2012-08-13
Hi,
this is a continuation of the question here -

http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Windows/XP/Q_22933207.html

if someone can answer this, they can get points from both questions.
0
Comment
Question by:chrismarx
  • 7
  • 3
  • 2
  • +2
17 Comments
 
LVL 29

Expert Comment

by:Alan Huseyin Kayahan
ID: 20342792
  Hi chrismarx
       Lets make a fresh start.  
         *You want to send an invitation but you get "Your current system settings prevent you from sending an invitation" correct?
         *Is this computer in a domain? Affected by any GPO?
         *Is currently logged on user a member of Administrators group of local computer?
         *Is "Remote Assistance" enabled in My Compuer properties>Remote ?
          If the computer is in a domain, apply the following GPO change on the GPO of OU which has your currently logged on user. If the computer is not in a domain, simply Start>run>gpedit.msc

        Computer Configuration>Administrative Templates>System>Remote Assitance
        *In right-pane, double-click "Offer remote assistance" and set it to enabled.
        *In drop-down box choose "Allow helpers to remotely control the computer"
        *Click show next to helpers, click add, then enter the currently logged on username

Apply, then run gpupdate /force. Computer reboot may be needed for GPO take effect

Regards
0
 
LVL 8

Expert Comment

by:JSoup
ID: 20342826
LogMeIn Free   http://www.pcworld.com/downloads/file/fid,24507-order,1-page,1-c,alldownloads/description.html
What is LogMeIn and why do I need it?

LogMeIn lets you access your Windows PC from anywhere in the world. All you need is a computer connected to the Internet. You see your Target PC's full desktop and control everything on it—applications, network files, email, printing—without the hassle of further downloads or installations. You can even share files that are too large for email. There's no need to lug around a laptop, because LogMeIn lets you access your PC from an internet cafe, an airport, or a hotel business center. You can even print documents you've accessed remotely.
Why do we offer LogMeIn Free? Because we can.
https://secure.logmein.com/welcome/get_logmein_free/why_is_it_free.asp
0
 
LVL 7

Accepted Solution

by:
jax79sg earned 500 total points
ID: 20343140
It seems that most of the obvious settings have been tried and tested to no avail.
I have a couple of possibilities, you may want to try it out.

The previous administrator may have 'hardened' your server in some manner which causes this. Try to grab hold of him/her to verify if possible. If that can't be done, we can try sniffing through the following.

Run 'services.msc'
Check if those services that relate to 'Remote ***' are at least set to Manual. Also look through the rest and see if there are other explitcitly disabled services. Note: Some administrators took the pain of removing services from the list during the hardening process, if this is the case you may have to look thru the web for the actual dependencies for the Remote Assistance feature.

Open 'Users/Groups'
Check that you have a remote desktop users group.

Check ('Local) Security Policies' in Administrative Tools.
Check that 'Allow logon through Terminal Services' has Remote Desktop Users.
Checj that 'Access this computer from network' has the essential logon groups or names.
Look through the list and see if there's anything you feel is not really right.

Hope this helps.
0
 
LVL 8

Expert Comment

by:JSoup
ID: 20343359
0
 

Expert Comment

by:code4pc
ID: 20367065
Is Windows Messenger allowed to run in the domain?
0
 

Author Comment

by:chrismarx
ID: 20367901
i will try these/find out and get back shortly
0
 

Author Comment

by:chrismarx
ID: 20368267
jax79sg:

ok, heres what i've found out.

1.  the remote desktop help session manager was set to manual , but was not started. starting it had no effect.
2. one of the dependencies for that is the Remote Procedure Call (RPC), which is set to automatic, and i do not seem to be able to change from the services panel
3. in the local security settings, there is no "Allow logon through Terminal Services" policy, only a "Deny logon through Terminal Services"

any ideas?

(ps. i havent heard anyone saying they couldnt use windows messenger...)
0
Threat Intelligence Starter Resources

Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

 
LVL 29

Expert Comment

by:Alan Huseyin Kayahan
ID: 20368351
chris did you have time to check my steps?
0
 

Author Comment

by:chrismarx
ID: 20368538
whoops, sorry, here goes:

1. yes, thats the message i get
2. it is on a domain. how would i check if its being affected by a group policy?
3. yes, logged on user is member of admin
4. yes, remote assistance is enabled
5. im assuming the gpo is not something i change here, correct?
0
 
LVL 29

Expert Comment

by:Alan Huseyin Kayahan
ID: 20368787
  GPO is group policy, that you should change as I mentioned. And you can do it in serverside with domain admin rights.
    *Do you have domain admin rights?
    *Is the user and computer object in an OU? If yes, are there any GPOs linked?

0
 

Author Comment

by:chrismarx
ID: 20369634
ok, i had to add the group policy snap-in. i enabled the remote services. I ran the gpudate, and it said that the computer policy refresh has completed,
certain user policies are enabled that can only run during logon.
ok to logoff?

i selected no, because i wasnt ready to reboot, but i did reboot a little later, and still no go, same message. i have to say, its amazing how many ways this service can be disabled-
0
 

Author Comment

by:chrismarx
ID: 20514394
I'm still trying to solve this problem, what would you recommend i do?
0
 

Author Comment

by:chrismarx
ID: 20514534
oy, this will be the second time for this question...
0
 

Author Closing Comment

by:chrismarx
ID: 31410769
Yes, it appears there were server settings disabling this, nothing to do with my own local comp-
0

Featured Post

Do You Know the 4 Main Threat Actor Types?

Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

Join & Write a Comment

This is a little timesaver I have been using for setting up Microsoft Small Business Server (SBS) in the simplest possible way. It may not be appropriate for every customer. However, when you get a situation where the person who owns the server is i…
Resolve DNS query failed errors for Exchange
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…

757 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now