Windows Server Setup Remote Assistance For Domain Computers Tutorial

Windows Server Setup Remote Assistance For Domain Computers Tutorial

  In an Active Directory domain environment, with many workstations, often we want to view the remote computer and offer remote assistance to repair their computer or a software problem. Rather than asking the user to setup remote assistance RA - a complicated issue for many users. We can use Active Directory Computers and Users + Group Policy on OUs to automatically setup workstations for accepting Remote Assistance. This video shows how:  
Transcript (machine generated so it contains errors)
1. 00:00:00:68 / 00:00:05:42 - hello and welcome to this video in this
2. 00:00:03:54 / 00:00:10:34 - video we should be showing you how to
3. 00:00:05:42 / 00:00:13:32 - set up on a domain server where you have
4. 00:00:10:34 / 00:00:15:90 - workstations connected to the Active
5. 00:00:13:32 / 00:00:18:74 - Directory domain where you can then
6. 00:00:15:90 / 00:00:22:50 - basically offer remote assistance
7. 00:00:18:73 / 00:00:25:28 - without them having to kind of like do
8. 00:00:22:50 / 00:00:27:59 - any settings and set up on their
9. 00:00:25:28 / 00:00:31:14 - workstations so we're gonna use group
10. 00:00:27:59 / 00:00:33:60 - policy and we're gonna use Active
11. 00:00:31:14 / 00:00:36:67 - Directory computers and users and then
12. 00:00:33:60 / 00:00:40:57 - just a little bit of PowerShell
13. 00:00:36:67 / 00:00:44:67 - okay the first thing is you need to
14. 00:00:40:57 / 00:00:48:48 - actually have the computers and the
15. 00:00:44:67 / 00:00:53:78 - users set up in Active Directory users
16. 00:00:48:47 / 00:00:57:35 - and computers okay we have got them in
17. 00:00:53:78 / 00:00:59:87 - here it is a demo machine okay the user
18. 00:00:57:35 / 00:01:01:71 - is there their computer is there when
19. 00:00:59:87 / 00:01:03:50 - they first join a domain the computers
20. 00:01:01:71 / 00:01:07:22 - generally go over there we just moved it
21. 00:01:03:50 / 00:01:10:61 - to this box the reason why is because we
22. 00:01:07:22 / 00:01:14:95 - are going to add a group policy or a
23. 00:01:10:61 / 00:01:17:93 - couple of group policies to this
24. 00:01:14:95 / 00:01:20:39 - organizational unit so it's easier for
25. 00:01:17:93 / 00:01:22:91 - us rather than giving it to all
26. 00:01:20:40 / 00:01:25:79 - computers we can select which computers
27. 00:01:22:92 / 00:01:28:14 - we want to use okay so that's the first
28. 00:01:25:79 / 00:01:30:18 - thing we've got our user set up we've
29. 00:01:28:14 / 00:01:32:18 - created a user and the computer when
30. 00:01:30:18 / 00:01:37:71 - they join we move it from there to there
31. 00:01:32:18 / 00:01:40:48 - okay the next thing we need to do is get
32. 00:01:37:70 / 00:01:40:48 - to group policy
33. 00:01:41:56 / 00:01:47:37 - okay now in group policy you'll see
34. 00:01:45:25 / 00:01:49:93 - we've got that organizational unit there
35. 00:01:47:37 / 00:01:53:40 - all we did was basically create a GPO in
36. 00:01:49:93 / 00:01:56:35 - this domain okay and we called it remote
37. 00:01:53:40 / 00:02:03:65 - assistance then we right clicked and
38. 00:01:56:34 / 00:02:06:06 - forced it and then clicked on edit now
39. 00:02:03:65 / 00:02:09:25 - for all the computers and users that
40. 00:02:06:06 / 00:02:11:40 - will be within this monitored you can
41. 00:02:09:25 / 00:02:13:68 - give it any name you want okay your
42. 00:02:11:40 / 00:02:15:78 - organizational unit the first thing is
43. 00:02:13:68 / 00:02:19:65 - we need to do is set up the group
44. 00:02:15:78 / 00:02:23:37 - policies for remote assistance so we
45. 00:02:19:65 / 00:02:26:90 - click on policies go to administration
46. 00:02:23:37 / 00:02:30:28 - administrative templates then system
47. 00:02:26:90 / 00:02:34:65 - scroll down a bit and we should see
48. 00:02:30:28 / 00:02:40:59 - Remote Assistance then we have configure
49. 00:02:34:65 / 00:02:44:68 - offer remote assistance click enabled
50. 00:02:40:59 / 00:02:46:15 - and then this is where it's very very
51. 00:02:44:68 / 00:02:49:18 - important because you don't want anybody
52. 00:02:46:15 / 00:02:54:70 - just being able to log on so what we did
53. 00:02:49:18 / 00:02:58:59 - was we entered in here okay this is our
54. 00:02:54:69 / 00:03:01:86 - domain name and then back slash domain
55. 00:02:58:59 / 00:03:03:78 - admins okay you could change the users
56. 00:03:01:87 / 00:03:06:31 - you could add different kinds of users
57. 00:03:03:78 / 00:03:10:15 - if you want we've kept it as only domain
58. 00:03:06:31 / 00:03:13:95 - admins can actually access that so you
59. 00:03:10:15 / 00:03:18:34 - do need to setup that the next thing is
60. 00:03:13:95 / 00:03:20:70 - if you scroll down here you will see for
61. 00:03:18:34 / 00:03:22:50 - Windows Vista and later you do need to
62. 00:03:20:70 / 00:03:26:85 - set up some group policies regarding the
63. 00:03:22:50 / 00:03:28:95 - firewall so that's quite easy what we
64. 00:03:26:85 / 00:03:31:65 - did was just copy this and then put it
65. 00:03:28:95 / 00:03:35:97 - into a notebook notepad so it's easier
66. 00:03:31:65 / 00:03:38:87 - then cancel that let's just do the other
67. 00:03:35:97 / 00:03:41:67 - thing was were here configure solicited
68. 00:03:38:87 / 00:03:45:43 - remote assistance enable that and you
69. 00:03:41:68 / 00:03:49:29 - can choose a number of hours per session
70. 00:03:45:43 / 00:03:51:81 - except for the admin will have before he
71. 00:03:49:29 / 00:03:53:90 - needs to reconnect it can be one hour
72. 00:03:51:81 / 00:03:58:28 - two hour three hours whatever
73. 00:03:53:90 / 00:04:02:09 - is good for your company okay so we
74. 00:03:58:28 / 00:04:04:73 - enable that that's what we did and now
75. 00:04:02:09 / 00:04:06:39 - there's another group policy that you
76. 00:04:04:74 / 00:04:11:55 - might want to consider
77. 00:04:06:38 / 00:04:15:92 - I'll just maximize this and bring this
78. 00:04:11:55 / 00:04:19:67 - out over here and it is basically go to
79. 00:04:15:93 / 00:04:24:75 - policies and then it's windows settings
80. 00:04:19:67 / 00:04:32:61 - and then security settings local
81. 00:04:24:75 / 00:04:36:52 - policies and it is purity options scroll
82. 00:04:32:61 / 00:04:41:87 - all the way down until you find user
83. 00:04:36:52 / 00:04:44:75 - account control allow you access take
84. 00:04:41:87 / 00:04:47:83 - that box click enabled click ok that's
85. 00:04:44:75 / 00:04:51:99 - done so these are the three things now
86. 00:04:47:83 / 00:04:54:00 - whilst we're here we can then create our
87. 00:04:51:99 / 00:04:56:97 - firewall exceptions that'll be
88. 00:04:54:00 / 00:05:00:75 - automatically pushed on to those domain
89. 00:04:56:97 / 00:05:06:93 - join workstations so we just find
90. 00:05:00:75 / 00:05:10:41 - Windows Firewall there we go and we need
91. 00:05:06:93 / 00:05:15:00 - to create a few inbound rules the simple
92. 00:05:10:41 / 00:05:16:95 - method is right click new rule and we
93. 00:05:15:00 / 00:05:21:18 - need to do our three things
94. 00:05:16:94 / 00:05:24:89 - ok so the first one was a port so we
95. 00:05:21:18 / 00:05:30:66 - click on port click Next and then it was
96. 00:05:24:89 / 00:05:33:01 - TCP and one three five click Next allow
97. 00:05:30:66 / 00:05:36:03 - the connection click Next
98. 00:05:33:01 / 00:05:39:41 - for the domain private-public whatever
99. 00:05:36:02 / 00:05:43:34 - is needed and then give it any name you
100. 00:05:39:41 / 00:05:48:59 - want and then click finish we did that
101. 00:05:43:35 / 00:05:52:53 - for basically our three things that were
102. 00:05:48:60 / 00:05:56:91 - required ok you will see over here there
103. 00:05:52:52 / 00:06:01:13 - is twice of that one gets created
104. 00:05:56:91 / 00:06:04:28 - automatically when we add the rope but
105. 00:06:01:13 / 00:06:07:62 - we've created these things over there ok
106. 00:06:04:28 / 00:06:10:70 - so then you do another two more new rule
107. 00:06:07:62 / 00:06:15:53 - and now this time it's a program click
108. 00:06:10:70 / 00:06:20:21 - Next so then the next thing is basically
109. 00:06:15:52 / 00:06:23:48 - copy that paste it in there as I said if
110. 00:06:20:22 / 00:06:26:55 - you ever get lost go back into the group
111. 00:06:23:49 / 00:06:30:29 - policy thing and you'll find the three
112. 00:06:26:55 / 00:06:34:41 - things that you need ok click Next I
113. 00:06:30:29 / 00:06:37:20 - love the connection again choose for
114. 00:06:34:41 / 00:06:39:27 - which types give it a name click finish
115. 00:06:37:19 / 00:06:41:87 - and then once again do it for the last
116. 00:06:39:26 / 00:06:44:84 - thing so you must have those three
117. 00:06:41:87 / 00:06:47:04 - things there once that's done we need to
118. 00:06:44:85 / 00:06:49:86 - open up PowerShell very easy just go
119. 00:06:47:04 / 00:06:53:00 - over here run Windows PowerShell run as
120. 00:06:49:86 / 00:06:54:88 - administrator and we're basically
121. 00:06:53:00 / 00:06:59:39 - gpupdate
122. 00:06:54:88 / 00:07:06:59 - forward slash force click enter yep you
123. 00:06:59:39 / 00:07:10:28 - need to spell it correct right once
124. 00:07:06:60 / 00:07:13:35 - that's done and assuming the user is
125. 00:07:10:29 / 00:07:15:39 - logged in and in front of their computer
126. 00:07:13:35 / 00:07:17:12 - screen ok and they're having some
127. 00:07:15:38 / 00:07:19:07 - problems they've called you up they send
128. 00:07:17:12 / 00:07:22:56 - you an email this is not working or
129. 00:07:19:07 / 00:07:31:16 - whatever then all you need to do is MS
130. 00:07:22:56 / 00:07:35:04 - are a and then offer are a click enter
131. 00:07:31:17 / 00:07:37:89 - and then if you've connected to them
132. 00:07:35:04 / 00:07:39:72 - before you'll have a history ok this is
133. 00:07:37:88 / 00:07:42:01 - the computer we want to or you type in
134. 00:07:39:72 / 00:07:47:28 - the IP address or their computer name
135. 00:07:42:01 / 00:07:49:13 - click Next and then it'll say ok we're
136. 00:07:47:27 / 00:07:51:80 - waiting for the user to give their
137. 00:07:49:13 / 00:07:54:77 - permission ok and you'll see this little
138. 00:07:51:81 / 00:07:59:51 - box come up on their screen they would
139. 00:07:54:77 / 00:08:04:43 - need to click yes and now if we go back
140. 00:07:59:51 / 00:08:11:66 - to our computer our server you'll see
141. 00:08:04:43 / 00:08:16:29 - basically their desktop in your side
142. 00:08:11:67 / 00:08:19:31 - here we go we've got our remote
143. 00:08:16:29 / 00:08:21:92 - assistant setup now you can request
144. 00:08:19:31 / 00:08:21:92 - control
145. 00:08:23:29 / 00:08:29:51 - they will get another message that's one
146. 00:08:26:75 / 00:08:32:33 - of the things about this thing they need
147. 00:08:29:50 / 00:08:34:68 - to be giving permission okay for legal
148. 00:08:32:33 / 00:08:37:12 - reasons you don't want to be monitoring
149. 00:08:34:69 / 00:08:39:72 - without permission you don't want to be
150. 00:08:37:12 / 00:08:42:16 - changing their system settings etc
151. 00:08:39:72 / 00:08:44:24 - without the permission whilst they're
152. 00:08:42:16 / 00:08:46:30 - logged on now you could try and click
153. 00:08:44:24 / 00:08:50:00 - yes over here it's not gonna work on
154. 00:08:46:30 / 00:08:54:85 - their screen they need to click yes give
155. 00:08:50:00 / 00:08:55:21 - information so now basically there we
156. 00:08:54:86 / 00:08:59:86 - are
157. 00:08:55:21 / 00:09:02:54 - you can then from your server side be
158. 00:08:59:86 / 00:09:05:38 - changing settings changing system
159. 00:09:02:53 / 00:09:11:08 - settings etc and then you could be
160. 00:09:05:38 / 00:09:14:52 - chatting with them okay hi this does not
161. 00:09:11:09 / 00:09:18:59 - work etc okay
162. 00:09:14:52 / 00:09:22:15 - and they'll get messages in the new chat
163. 00:09:18:59 / 00:09:24:20 - back and forwards etc and okay if the
164. 00:09:22:15 / 00:09:26:41 - user ever wants to stop sharing they
165. 00:09:24:20 / 00:09:30:23 - just click over here stop sharing stop
166. 00:09:26:41 / 00:09:33:55 - giving control etc and that would be the
167. 00:09:30:23 / 00:09:37:90 - end of it just a quick refresher for
168. 00:09:33:55 / 00:09:41:00 - those who might want to know where was
169. 00:09:37:90 / 00:09:42:76 - Active Directory users and computers etc
170. 00:09:41:00 / 00:09:46:69 - just open up server manager which is
171. 00:09:42:76 / 00:09:49:73 - here go to server manager click on that
172. 00:09:46:69 / 00:09:52:22 - go to tools and then you've got Active
173. 00:09:49:73 / 00:09:58:07 - Directory using computers there and then
174. 00:09:52:22 / 00:10:01:22 - group policy management is there for the
175. 00:09:58:07 / 00:10:06:74 - role that we need to have so add roles
176. 00:10:01:22 / 00:10:08:66 - and features and then next and it's
177. 00:10:06:74 / 00:10:11:69 - under features once you've done a few
178. 00:10:08:65 / 00:10:14:00 - more necks and it's this remote
179. 00:10:11:69 / 00:10:15:68 - assistance you need to take that and
180. 00:10:14:00 / 00:10:17:87 - install it you don't need to restart the
181. 00:10:15:67 / 00:10:19:72 - computer after doing that it just needs
182. 00:10:17:87 / 00:10:23:00 - to be installed otherwise you won't be
183. 00:10:19:73 / 00:10:28:03 - able to get that MSR a forward slash
184. 00:10:23:00 / 00:10:31:50 - offer RA so you know nutshell this is
185. 00:10:28:03 / 00:10:35:07 - how it is done hopefully this is helped
186. 00:10:31:50 / 00:10:35:08 - thank you for watching
Visit our YouTube channel: https://www.youtube.com/channel/UCFj1BHYIUYfPWPb1Xn5qFIg