Remote assistance uac windows 7

Anthony how about logging into a newly imaged machine in a remote branch office with no IT staff? We have a global vendor who ships hardware to us, plugs it in for us or we talk someone through it if that service is not provided in the respective country then we build new machines for people in offices all around the world using PXE boot deployment silently and unattended right to the point that someone has to press CTRL-ALT-DEL sometimes imaging script stops because of bad logic in a new software package etc and we need to restart.

However since Windows 7, we have to annoy someone to read prompts on a screen where we never had before. What about the situation where the user has allowed you to remote control via email chain so there's your authorisation paper trail and you are playing phone tag with them? I don't like hearing from my guys "i was delayed in solving because I needed the user at the computer".

Even if we had your wonderful password reset tool, or used local password change via GPP, it is still time consuming. That's password changes x at least mins. Also, I would probably fire one of my guys if they handed out the local admin password and the user had access to that for anything more than 5 minutes.

Seriously, get with the times and hear what the greater community are saying MS. We want no prompt. Does Microsoft really think that end-users should have Admin rights on their PCs to be able to ask for help???

Come-on, they are calling the person asking for help a novice in the documentation, do they really imagine that I will give the admin password to a novice!!!!! That an extra time and money wasted, because somebody is not thinking logically in Redmond. It's just not useful in an enterprise environment, as you can see. If it were for enterprise, the user wouldn't even need to initiate a session, because there would be an admin tool to simply logon to any desktop to share the user session.

And that isn't going to happen, because Microsoft wants to sell terminal server licenses. You'll just have to go with 3rd party solutions, like GoToAssist, which does not have all these limitations. It works as advertised, which greatly improves the usefulness of Remote Assistance.

The user does not need initiate the session as long as you know the name of their system. Yes there is a checkbox there in Windows 7 to respond to UAC prompts however when using the Secure Desktop for UAC the screen will go blank and it is not possible to elevate. Yes, Barry is right. It worked for me. Set both of these:. Saw this feature in windows7 and thought it was great.

Tried to fix an issue for a user install some software when I did the run as admin I got the pause screen. Then I noticed the check box for let the helper see UAC. I thought oh right, got the user to tick that box Now I think the feature is a waste of space. I would be much happier if I could configure users who can take control and use UAC in group policy.

Me: "Hi, is it ok for me to connect to your PC to help with the issue you've been having". In Active Directory add the user member of "admin of domains" during the remote assistance, they uses their credentials. This continues to be a problem for us on ALL Windows 7 computers we deploy even though we have We have thousands of users, many of which are remote with user accounts that are not part of any group other than standard user. We use various remote support tools and we have the same issue across the board; because UIAccess is disabled we can at least see the prompt remotely but that is useless because we cannot enter admin credentials and even when a the user enters the local admin credentials provided to them the remote admin is unable to interact with or click through application installers.

MS needs to fix this fast, I am sure an additional policy to allow remote access to the UAC and installers. What is the need of security if it gets in the way? Now we are having to issue remote users local admin credentials just so we can support them, something that we should not have to do.

Why isn't there a policy that also lets remote admins able to enter credentials and click through application installers?

Our Enterprise environment has it working. When using the Windows 7 default domain profile, the default firewall configuration is already set correctly and the remote maintenance option active. Windows Firewall: Define program exceptions: Enabled Exceptions:. Here's some links we used to get this up and running:. We have a number of employees who have Windows 8 not Pro and this solution worked perfectly for me. Please follow the below steps to configure UAC by using group policy so that it can apply to all machine.

Steps3: Now go to this location. And make the changes as mentioned below. Group Policy setting. Registry key. Changes Required. Prompt for consent for non-Windows binaries. User Account Control: Behavior of the elevation prompt for standard users. Prompt for credentials on the secure desktop.

User Account Control: Detect application installations and prompt for elevation. Disabled default for enterprise. User Account Control: Only elevate executables that are signed and validated. User Account Control: Switch to the secure desktop when prompting for elevation. User Account Control: Virtualize file and registry write failures to per-user locations. Enjoy J. Office Office Exchange Server. Asked 11 years ago.

Active 9 years, 1 month ago. Viewed 7k times. Improve this question. Add a comment. Active Oldest Votes. Improve this answer. Michael Steele 1 1 gold badge 4 4 silver badges 12 12 bronze badges. Jordan W. This was the answer.

Thank you guys so much — blsub6. As long as they are connected to the internet that should do the trick. To continue this discussion, please ask a new question. Get answers from your peers along with millions of IT pros who visit Spiceworks. Popular Topics in Windows Spiceworks Help Desk.

The help desk software for IT. Track users' IT needs, easily, and with only the features you need. Learn More ». Thai Pepper. Verify your account to enable IT peers to see that you are a professional. Ghost Chili. Brianinca This person is a verified professional. It's looking like we are going to have to do that. Big Green Man This person is a verified professional. Windows 10 expert.

Is there a portable variant? Brianinca wrote: Is there a portable variant? I thought there was, but it looks like the portable link on TightVNC's site is dead. Big Green Man wrote: Brianinca wrote: Is there a portable variant? If I want to install something why do I get a black screen. This is a feature that should be built in to any OS.

Look at Mac OS and other unix systems they have this feature built in for free. This should be a secure desktop and not inhibit the service of your products please fix this issue ASAP! Its great you add complexity and the latest AI features woooa but you cannot even do the simple things painlessly and well. I am disappointed when I try to rely on MS products they fail at the simple things. You all are like a disappointing stranger. I just want you to help hold the door open while I carry the heavy box through the door.

By either holding the door open, or prop it open but you just let it go and the door closes in my face before ever accomplishing such a simple task. And you remotely connect with a user Member of this group. I am talking about remote assistance not remote desktop. I think you misunderstand the problem. The issue is why a security group cannot be set like they allow this on unix machines to be allowed to remotely assist clients or vendors on a shared screen through the secure desktop prompt in an enterprise environment.

Why do I have to take on more risk to be able to effectively resolve issues for clients.