Thursday, November 9, 2023

Improve experience with Quick assist Non Administrator mode

Standard

Many customers intend to use third-party remote assistance tools for their day-to-day support needs, while some opt for Teams as their remote support tool. In my experience, using the Quick Assist tool has proven to be much more beneficial, and I have personally experienced its advantages.


However, when Administrator mode is not available, I've observed a decrease in the quality of the experience. To address this issue, I've implemented some strategies to avoid suboptimal experiences.

Before that, I recommend using the shortcut for Quick Assist, which is Ctrl + Windows key + Q. It's much easier to guide end users by asking them to press these keys.


Option 01

Quick Assist is my preferred application for remotely resolving technical issues. It also allows me to elevate my privileges and run as an administrator for hardware and software installation and configuration. The following steps outline the process:

Launch the Command Prompt (CMD) on the end user's computer.

Enter the following command:

runas /user:domain\administrator cmd

Replace "domain" with your organization's domain.

Replace "administrator" with any valid administrator login.

If a domain is not available, use the following command in CMD:

runas /user:local_user cmd

Enter the administrator password when prompted.

Once you've successfully launched CMD in administrator mode, you can perform various tasks, such as:

Installing software using a command like 

  • x:\MicrosoftEdgeSetup.exe (for software installation, where x is any drive letter from your computer).
  • appwiz.cpl for installing or uninstalling program.
  • Services.msc (Run or Stop a service)
  • devmgmt.msc (Device Manager, to install/uninstall or upgrade the device driver)
  • diskmgmt.msc (Disk Management) 
  • compmgmt.msc (Computer Management)
  • regedit (Registry Editor)

Option 02

When opening an elevated privilege application, a pause screen is typically displayed, and the end user is prompted to enter the Admin password. However, in cases where the user is not accustomed to such a procedure and you, as the administrator, want to ensure a secure experience, this can be challenging.


 This is how I've developed a workaround to address this issue.

  1. Login to Intune Admin Center - https://intune.microsoft.com/
  2. Go to Devices and select Configuration profiles
  3. Then Create a Policy 
    • Platform - Windows 10 and later
    • Profile type - Settings Catalog
  4. Provide the name and click next
  5. In the Configuration Setting Tab, select +Add settings and search for "User Account Control"
  6. Then Select Local Policies Security Options
  7. after that select these two polices 
    • User Account Control Behavior Of The Elevation Prompt For Standard Users
    • User Account Control Switch To The Secure Desktop When Prompting For Elevation


8. Set below policy as below 
    • User Account Control Switch To The Secure Desktop When Prompting For Elevation - Disabled
    • User Account Control Behavior Of The Elevation Prompt For Standard Users - prompt for credentials


9. Then Select Next and in the Assignment page add the group. after than click next and create the policy. 

After option 02; Quick assist remote experience

A password prompt appears on the remote system, allowing the admin to type




0 comments:

Post a Comment