Microsoft Endpoint Manager - Intune Remote Help
Вставка
- Опубліковано 24 лис 2021
- Intune Remote Help, released a to Public Preview a little while ago, is a tool that allows admins to offer remote help, or Remote Assistance, to users within their organisation.
Remote Help is based on Quick Assist, an inbuilt app within Windows 10 or Windows 11, however the Remote Help app must be either manually installed, or deployed to the end user device.
The Cloud Management Community is YOUR community for Cloud Management, Mobile Device Management and Microsoft Endpoint Manager. Join the discussion on Twitter (@the_cmcommunity) and subscribe to be notified when we go LIVE.
Dean Ellerby is a Microsoft Certified Trainer, Organiser at CloudManagement.Community, Contributor at Petri.com and a Workspace Solution Architect at CDW UK. He's on Twitter @dean_ellerby. Any views or opinions expressed here are his own. - Наука та технологія
Thanks for the video. One thing that is super important. When you enter your credentials for elevation the user can click on the "eye/view" icon of the password and capture the password!!!!! Woa Microsoft - did you even think about this?
This looks very nice an intuitive, great explanation !!!
Great video! Thanks!!! I hope the keyboard layout management will be as good as the QuickAssist app ;)
Another impressive video Dean. thanks a lot!
Thanks!
Great video, thanks Dean. I would love it more if the app includes the option for Ctrl+Alt+Delete for some of us with policy that requires it.
Great video, thanks Dean
You're welcome. Thanks for watching !
Awesome ! I can foresee some unpleasant user experiences every time they choose to "Close" the Remote Help screen sharing window, considering many like to have multiple files and folder open all time. 😂
Exactly! It would be helpful if it gave a warning to the admin when either elevating or closing the session...!
How is this different from quick assist that’s built into windows today?
It's built upon Quick Assist, so its very similar. They've added RBAC, organisational / AAD login, and the ability to elevate through UAC.
Glad I found this. I was asked to find a way to elevate to admin through Quick Assist without lowering UAC security.. the answer seemed to be, you can't.. Maybe this will be a decent alternative
It’s certainly the only way to do that, but it’s not cheap!
Bomgar/Beyond Trust seems well recommended
Agreed. Dean’s tweet is getting some good feedback on alternatives!
twitter.com/dean_ellerby/status/1518626158551654400
Thanks, You are a gigant!!
You're welcome!
@ $3.50 per month per user this is not exactly cheap. Also note that if you follow the guidelines of the Security baseline and Secure score it advises you to disable remote assistance !
Hi. We are moving to co-management. We are testing remote help app on co-managed device, which has all workloads from intune. After we install remotehelpap.exe and try to open it. It closes and nothing happens no log entries. From intune policies we only have compliance policy deployed to this workstation.
Anyone else have issues with connection to the user who needs assistance? I often get error message like "the remote service doesnt work right now try again later..."
Can you do a video about UAC? sometimes i need to install an application on a users computer but as they don't have admin rights it blocks the installer from running. I tried deploying a script with powershell and for computers that are just set up i get the UAC prompt where i can enter my credentials and the app will install.
Its just very specific apps i need to install sometimes so deploying through intune is a bad ROI.
Is there a certain setting in Azure i have to enable so a prompt will appear where i can put my credentials in?
Unfortunately, we will need to keep our Teamviewer, since this doesn't allow for unattended access. Still, it's always good to have more than one trick up your sleeve. Thanks for the additional info on the install command!
You’re welcome. Thanks for checking it out.
You can configure the admin elevation. I have tried and it is working fine.
I have been testing the device configuration policies in 3 physical devices.
Among the 3 devices, only 1 device seems to be accepting all policies.
Two of them is not accepting all the policies. As this is the case I think the issue is device specific. What could be the reason?
When my users try to run something as an admin they just get the "this action is blocked by your org blabla...." instead of a prompt. please can u tell me how i make the prompt appear instead of the error message. I have been struggling with this for months
Does this require an admin group be pushed via Intune to the local admin group on the devices prior to being deployed? How would any device (or more specifically) non-enrolled devices know to allow the admin account permissions via UAC?
It requires the user or helper to be able to elevate with credentials.
ua-cam.com/video/UYeuP1xS2yE/v-deo.html
Very nice! Thank you for the details in setting this up. Is there a Remotehelp app for IOS/Android Intune clients too? That would be sweet!
Not that I can see. It’s just the Windows app at the moment. It seems to be a repackaged Quick Assist with support for organisational accounts and UAC.
Hi really good video thanks.
But I don't have the Remote Help task under Connectors and Tokens do you know why this might be so
I have found it now it is under tenant administration.
Anyone else having issues using the command line Remotehelp.exe /install /quiet acceptterms=yes I get an error that says COMMANDLINE USAGE ERROR You must accept the EULA by passing acceptTerms=Yes. I wonder if this is case sensitive. Will try again.
LOL - Completely case sensitive - must be this: Remotehelp.exe /install /quiet acceptTerms=yes
Amazing that they’ve released something so specifically difficult to deploy, when it needs to be deployed by everyone to even work…
What are the requirements, license wise, when this comes out of preview? We run a mix of M365 E3 and O365 E3 + Security and Mobility E3. Would this get me remote help?
I don’t have any specific info on pricing yet, other than it will probably not be zero cost.
I think it’s unlikely to be included O365 E3/E5, or EMS E3/E5. If it’s included in any SKU, it will be M365 E3/E5 in the new year, with the new pricing model in place.
@@theCMC we are probably moving to all M365 E3 in the new year anyways... the O365s will be expiring soon. Thanks!
Good news! We will find out the pricing as soon as its out of preview.
What a total miss that the user needs to fill in a code, that the user is signout and that its not startable from the intune portal, and what about kiosk machines without giving the code or person less computer… Microsoft sometimes blows my mind, we use Bomgard for this simple feature.