Announcement

Collapse
No announcement yet.

Remote assistance offer could not be sent

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Remote assistance offer could not be sent

    Hi Everyone,

    I am having problems offering remote assist to Win 7 pc's in our domain. We are running a 2003 AD domain and running win 7 professional.

    When I try to offer remote assist from a Win 7 machine to another, I get a message saying offer to help could not be sent.

    I've looked at heaps of different pages about this same problem and I still can't seem to figure out why it's not working.

    I have a GPO which has the domain admins (me) enabled to offer remote assistance, firewall is turned off on both machines, anti virus is off etc.

    If I am logged into the client pc as the local (non domain) administrator, I can then offer remote assist from my machine ok. So, it seems like it is some form of permissions etc.

    I have even gone so far as creating a testing OU to put this machine into with only one GPO applied - the remote assist gpo. But still no joy.

    I've tried asking this question on the Microsoft forums but no luck - hoping someone here might have some clues.

    Thanks

    P.S We have a test network and I can remote assist to Win 7 machines ok on there. The only real difference I can tell is that the schema has been upgraded to put a 2008 R2 server on there.

  • #2
    Re: Remote assistance offer could not be sent

    *Bump*

    Anyone got any ideas??

    Comment


    • #3
      Re: Remote assistance offer could not be sent

      Run the command below as admin on the target pc:

      secedit /export /areas USER_RIGHTS /cfg "c:\temp\USER_RIGHTS.txt"

      can you show us the results.

      /Rems

      This posting is provided "AS IS" with no warranties, and confers no rights.

      __________________

      ** Remember to give credit where credit's due **
      and leave Reputation Points for meaningful posts

      Comment


      • #4
        Re: Remote assistance offer could not be sent

        Hi Rems,

        Here are the results:

        [Unicode]
        Unicode=yes
        [Privilege Rights]
        SeNetworkLogonRight = *S-1-1-0,*S-1-5-21-2129369522-615880853-128661843-1623,*S-1-5-32-544,*S-1-5-32-545,*S-1-5-32-551
        SeBackupPrivilege = *S-1-5-32-544,*S-1-5-32-551
        SeChangeNotifyPrivilege = *S-1-1-0,*S-1-5-19,*S-1-5-20,*S-1-5-32-544,*S-1-5-32-545,*S-1-5-32-551
        SeSystemtimePrivilege = *S-1-5-19,*S-1-5-32-544
        SeCreatePagefilePrivilege = *S-1-5-32-544
        SeDebugPrivilege = *S-1-5-32-544
        SeRemoteShutdownPrivilege = *S-1-5-32-544
        SeAuditPrivilege = *S-1-5-19,*S-1-5-20
        SeIncreaseQuotaPrivilege = *S-1-5-19,*S-1-5-20,*S-1-5-32-544
        SeIncreaseBasePriorityPrivilege = *S-1-5-32-544
        SeLoadDriverPrivilege = *S-1-5-32-544
        SeLockMemoryPrivilege = Administrator,*S-1-5-21-2129369522-615880853-128661843-2830
        SeBatchLogonRight = *S-1-5-32-544,*S-1-5-32-551,*S-1-5-32-559
        SeServiceLogonRight = *S-1-5-80-0
        SeInteractiveLogonRight = Guest,*S-1-5-32-544,*S-1-5-32-545,*S-1-5-32-551
        SeSecurityPrivilege = *S-1-5-32-544
        SeSystemEnvironmentPrivilege = *S-1-5-32-544
        SeProfileSingleProcessPrivilege = *S-1-5-32-544
        SeSystemProfilePrivilege = *S-1-5-32-544,*S-1-5-80-3139157870-2983391045-3678747466-658725712-1809340420
        SeAssignPrimaryTokenPrivilege = *S-1-5-19,*S-1-5-20
        SeRestorePrivilege = *S-1-5-32-544,*S-1-5-32-551
        SeShutdownPrivilege = *S-1-5-32-544,*S-1-5-32-545,*S-1-5-32-551
        SeTakeOwnershipPrivilege = *S-1-5-32-544
        SeDenyNetworkLogonRight = Guest
        SeDenyInteractiveLogonRight = Guest
        SeUndockPrivilege = *S-1-5-32-544,*S-1-5-32-545
        SeManageVolumePrivilege = *S-1-5-32-544
        SeRemoteInteractiveLogonRight = *S-1-5-32-544,*S-1-5-32-555
        SeImpersonatePrivilege = *S-1-5-19,*S-1-5-20,*S-1-5-32-544,*S-1-5-6
        SeCreateGlobalPrivilege = *S-1-5-19,*S-1-5-20,*S-1-5-32-544,*S-1-5-6
        SeIncreaseWorkingSetPrivilege = *S-1-5-32-545
        SeTimeZonePrivilege = *S-1-5-19,*S-1-5-32-544,*S-1-5-32-545
        SeCreateSymbolicLinkPrivilege = *S-1-5-32-544
        [Version]
        signature="$CHICAGO$"
        Revision=1


        Cheers

        Cameron

        Comment


        • #5
          Re: Remote assistance offer could not be sent

          Originally posted by Cameron Brennan View Post
          [...]
          We are running a 2003 AD domain and running win 7 professional.
          [...]
          When I try to offer remote assist from a Win 7 machine to another, I get a message saying offer to help could not be sent.
          If I am logged into the client pc as the local (non domain) administrator, I can then offer remote assist from my machine ok
          Have you read this kb article: http://support.microsoft.com/kb/2003088

          Before installing the hotfix, make sure the GPO is correctly configured and applied to the target computer. On the target computer run the command:
          reg.exe query "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services\RAUnsolicit"
          again, can you show us the results.

          /Rems

          This posting is provided "AS IS" with no warranties, and confers no rights.

          __________________

          ** Remember to give credit where credit's due **
          and leave Reputation Points for meaningful posts

          Comment


          • #6
            Re: Remote assistance offer could not be sent

            Hi Rems,

            This is the result of the query...

            HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Win dows NT\Terminal Services\RAUnsolicit

            inghamsnet\cbrennan REG_SZ inghamsnet\cbrennan

            I'll download the hotfix and see if I can test it tonight, if not tomorrow sometime.

            Cheers

            Cameron

            Comment


            • #7
              Re: Remote assistance offer could not be sent

              Hi Rems,

              You are a champion!

              It now works so thank you very much for that!

              One less thing on my job list to work on.

              Thanks very much!

              Comment

              Working...
              X