Remote Assistance sessions do not enable access to user programs that are run by using elevated rights in Windows Vista and Windows 7

Applies to: Microsoft IntuneWindows 7 EnterpriseWindows 7 Professional More

Symptoms


After you accept control of a user's desktop during a remote assistance session on a managed computer that is running Windows Vista or Windows 7, the remote assistance session briefly displays a blank screen. This problem occurs when you try to access an application or tool that the user typically runs as an administrator or runs by using elevated user rights.

The User Account Control dialog box appears correctly in the user's session and prompts the user to enable the elevated program to run. After the user either accepts or rejects the User Account Control (UAC) request, you can control the session again. However, you cannot control or work in the elevated program, even if the user clicked Yes in the User Account Control dialog box.

Workaround


To work around this problem and to provide remote assistance for any program that requires local administrator rights, take one of the following actions:
  • Disable UAC on the managed computer before you provide remote assistance. To do this, open a command prompt by using the Run as administrator command, type the following command, and then press Enter:
    C:\Windows\System32\cmd.exe /k %windir%\System32\reg.exe ADD HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System /v EnableLUA /t REG_DWORD /d 0 /f
  • On the managed computer, edit the Easy Assist manifest file. To do this, follow these steps:
    1. Open the following file:
      %ProgramFiles%\Microsoft Easy Assist\Console\8.1.6416.0\Supportconsole.exe.manifest
    2. Locate the following line of code:
      requestedExecutionLevel level="asInvoker" uiAccess="false"
    3. Change the value of the uiAccess attribute to true, as in the following example:
      requestedExecutionLevel level="asInvoker" uiAccess="true"
    4. Save and close the file, and have the user close and restart the Easy Assist session.

Applies to

This article applies to the following:
  • Microsoft Intune
  • Windows 7
  • Windows Vista