Jump to content

Recommended Posts

Posted

We are due to get a load of Staff laptops running Windows 10 and i'm looking at some Remote offsite desktop software where we can jump on to the user's PC when agreed with member of staff to assist them.

 

There are 3 of us in the office that would need licensing.

 

I've looked at Teamviewer and the costs are very expensive. Logmein123 (logmeinrescue) is even more expensive.

 

I thought about Impero as we are an impero school but only if there was a way for the end user to provide a pin to us so we didn't have unattended access.

 

Does anyone run anything like this at the moment as using the free version of teamviewer is obviously against their terms.

 

Google Remote Desktop? Can this be locked down so only those permitted to provide support and view/control the device.

Posted

+1 for Quick Assist.

Impero has the option to prompt for the end users-staff to allow access.

You can create a group and assign access to your team.

Posted
Another vote for Quick Assist - only limitation is you can't do anything involving UAC prompts, but I found teamviewer had the same problem (and wouldn't even let me click on an elevated window if I'd managed to trick my way round a UAC popup). Maybe just that I was using the free version (as they let anyone use the free licence for a while over the closedown) and it was just running as the logged in user I suppose...
Posted

I knocked up some screenshots/instructions for staff back in March, shows what they'll see etc on Quick Assist if you've never used it http://support.akslytham.com/

It's probably somewhere in the start menu but it's installed by default with Win 10 which is nice.

  • Thanks 1
Posted

Could quick assist be locked down to prevent staff connecting to staff so that only administrators can connect to clients?

 

I'm looking at using intune as a MDM only to manage these devices as we are mainly a google school but teachers want MS devices.

 

These devices wont see the OnPrem domain just yet so be nice to use intune to lock them down.

Posted

I use the open source remotely. Works really well and is super easy to deploy on Windows Server. Got mine running in Google Cloud on Ubuntu at the moment.

 

All the remote control is browser based and you have an option of either using the one time run client for support or installing a client and having unattended access to the machine.

 

https://remotely.one/

Posted
@Katy we use Quick Assist with UAC working, from memory there’s several GPO settings you need in place first. Luckily we had those settings in place before remote working / learning happened.
Posted
Maybe by default, however we’ve got AUC working for all users, allowing us to make admin changes when remoting into school devices with staff and student logged in (both on and off site).
Posted (edited)

UAC does work on quick assist as long as you it's not the secure desktop with a non admin user logged in.

 

Ideally you want an always on VPN so you can authenticate against a DC, unless you have cached admin credentials on each laptop[emoji15].

Ideally have LAPS deployed if you need to elevate.

Or use JEA where a virtual admin is created when needed.

Edited by free780

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now



×
×
  • Create New...