+ Post New Thread
Results 1 to 5 of 5
Windows 7 Thread, Remote Assistance with Mandatory Profiles in Technical; I currently use Windows Remote Assistance (msra.exe /expert) to connect to, view and control users' computers if they have a ...
  1. #1
    FreeWill's Avatar
    Join Date
    Jan 2007
    Location
    North East
    Posts
    118
    Thank Post
    19
    Thanked 9 Times in 9 Posts
    Rep Power
    17

    Remote Assistance with Mandatory Profiles

    I currently use Windows Remote Assistance (msra.exe /expert) to connect to, view and control users' computers if they have a software problem.

    This works great with users who have roaming profiles - but not for those who have mandatory profiles. When attempting to connect to a user who has a mandatory profile the following error is displayed on the user's screen:
    "There was a problem starting Remote Assistance
    Remote Assistance is unavailable for the current user account. If you are using a Windows Guest account try logging in with another account. If you are not using a Guest account, try restarting your machine."

    The Remote Assistance on the initiator's PC times out after a few minutes.

    The problem appears not to be our mandatory profile; I have created a new mandatory profile using the 'default' user profile and this still failed. When the ntuser.dat extension was changed to .man the error above was displayed and the connection would not be made. After rebooting the PC, changing the ntuser.man extension to .dat allowed the connection to be made OK. i.e. the problem appears not to lie within the content of the ntuser file or profile, but the way in which Windows interprets the .man extension - apparently placing a restriction on Remote Assistance connections.

    Does anyone have a solution / suggestions that may lead to a solution to this?

    We are using Windows 7 64bit Enterprise with all the latest updates. The roaming / mandatory profile is hosted on a share which the users have full control (share & NTFS) over.

    Thanks in advance,
    FW.

  2. #2

    Join Date
    Jan 2011
    Posts
    1
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Our company were also getting this problem when trying to use windows RA instead of Citrix shadowing on Win2008 x64 R2 RDC server.
    Apparently PKI and encryption have trouble with temporary profiles since the secrets cannot be persisted (in the profile), this can be fixed by modifying the state key on the profile list:

    HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\ProfileList\<YOUR_SID>\State (REG_DWORD) = 0

    Note that Windows 2008 doesn’t do the encryption check; it seems to be something added to R2 only.

    We are to add this to a logon script for all users, so we can RA to their Citrix sessions.

    Hope this helps

  3. #3

    Join Date
    Mar 2011
    Posts
    1
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    We have exactly the same problem here:

    W7SP1 desktops for users and servicedesk. Mandatory profile for users. When we try to initiate remote assistance we get:

    "There was a problem starting Remote Assistance
    Remote Assistance is unavailable for the current user account. If you are using a Windows Guest account try logging in with another account. If you are not using a Guest account, try restarting your machine."

    When we remove the mandantory profile for the user everything works great.

    I tried the fix with the registry key but that didn't work.

    I'm open for ideas,

    Found what I was doing wrong: I put the regkey with sid of the servicedesk group in the profilelist. I needed to change the created registerkey of the logged in user. After manualy changing the <usersid>\State=0 it works again.

    Now I am looking for a way to implement this in the preferences part of the GPO
    Last edited by g0llem; 24th March 2011 at 03:38 PM. Reason: the fix is working

  4. #4

    Join Date
    Jul 2011
    Posts
    1
    Thank Post
    0
    Thanked 1 Time in 1 Post
    Rep Power
    0
    Hi there

    Thanks for the post, worked for me.

    I went with a GPO in the end using a group policy preference.

    Within the Registry section I created a new action to update

    Hive HKEY_LOCAL_MACHINE
    Key path SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\%LogonUserSid%
    Value name State
    Value type REG_DWORD
    Value data 0x0 (0)


    The %LogonUserSid% came in very handy for this tasks otherwise it would have been a little difficult.

    Hope that helps someone else

  5. Thanks to brightg from:

    jdell (11th April 2014)

  6. #5
    jdell's Avatar
    Join Date
    Mar 2012
    Location
    Swindon
    Posts
    90
    Thank Post
    5
    Thanked 4 Times in 3 Posts
    Rep Power
    6
    Sorry to bring up an old post but it seems that we have the same issue you describe, I have tried using the gpo to edit the registry but still no joy I also have a vbscript to try below. Can anyone help?;

    Option Explicit
    Const HKLM = &H80000002

    Dim objReg, strRegKey, strRegValue, strRegData, objAdInfo, objUser, username, objWMIService, objAccount, strComputer, wmipath, oShell, usersid, domain
    strComputer = "."

    Set oShell = CreateObject( "WScript.Shell" )

    username = oShell.ExpandEnvironmentStrings("%UserName%")
    domain = oShell.ExpandEnvironmentStrings("%UserDomain%")

    Set objWMIService = GetObject("winmgmts:\\" & strComputer & "\root\cimv2")
    wmipath = "Win32_UserAccount.Name='" & username & "',Domain='" & domain & "'"

    Set objAccount = objWMIService.Get(wmipath)
    usersid = objAccount.SID

    Set objReg = GetObject("winmgmts:{impersonationLevel=impersonat e}!\\" & ".\root\default:StdRegProv")
    strRegKey = "Software\Microsoft\Windows NT\CurrentVersion\ProfileList\" & usersid & "\"

    strRegValue = "State"
    strRegData = "0"

    objReg.SetStringValue HKLM, strRegKey, strRegValue, strRegData

    WScript.Quit 0 'Return success



SHARE:
+ Post New Thread

Similar Threads

  1. Remote Desktop or Remote Assistance......?
    By tosca925 in forum Windows
    Replies: 20
    Last Post: 31st January 2012, 09:26 PM
  2. Remote Desktop Services - Mandatory Profiles
    By mmoseley in forum Windows Server 2008 R2
    Replies: 4
    Last Post: 15th March 2010, 09:31 AM
  3. Request Remote Assistance
    By wesleyw in forum How do you do....it?
    Replies: 6
    Last Post: 3rd March 2010, 12:40 AM
  4. Remote Assistance Program
    By wesleyw in forum How do you do....it?
    Replies: 9
    Last Post: 25th September 2009, 01:41 PM
  5. Remote assistance help needed
    By ltunstall in forum Windows
    Replies: 3
    Last Post: 25th September 2008, 11:12 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •