Remote Assistance fails on Domain - Windows 7 to Windows 7
I can offer RA to some machines but not all. Our computers are running Windows 7 Pro 32-Bit on a Windows Server 2008 domain.
I created Remote Assistance GPO to enable the feature needed on network.
User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop - ENABLED
Offer Remote Assistance - ENABLED (Added our group to Helpers list)
Solicited Remote Assistance - DISABLED
Confirmed HKLM>Software>Microsoft>OLE, EnableDCOM = Y
I even installed RA on the domain controller.
I can access the desktop's C:\ from the network so I can access the targeted computer but I get the following error from RA:
I checked the Default Properties on the targeted computer and confirmed "Default Authentication Level - Connect" and "Default Impersonation Level - Identify". Enable Distributed COM on this Computer is checked.
I check EventViewer and get the following error:
Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 3/15/2013 2:32:51 PM
Event ID: 10006
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: ComputerName.doamin
Description:
DCOM got error "2147746132" from the computer 10.x.x.x when attempting to activate the server:
{833E4010-AFF7-4AC3-AAC2-9F24C1457BCE}
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
<EventID Qualifiers="49152">10006</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2013-03-15T19:32:51.000000000Z" />
<EventRecordID>17724</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>PCName.domain</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">2147746132</Data>
<Data Name="param2">10.x.x.x</Data>
<Data Name="param3">{833E4010-AFF7-4AC3-AAC2-9F24C1457BCE}</Data>
</EventData>
</Event>
Error 3/15/2013 2:32:51 PM DistributedCOM 10006 None
I check the EventVwr on Target Computer and I see this error:
The application-specific permission settings do not grant Remote Activation permission for the COM Server application with CLSID {3C3A70A7-A468-49B9-8ADA-28E11FCCAD5D} and APPID {F8FD03A6-DDD9-4C1B-84EE-58159476A0D7} to the user Domain\UserID SID
(S-1-5-21-2372432400-2791315748-1353314665-5232) from address 10.x.x.x. This security permission can be modified using the Component Services administrative tool.
If anyone can help me I would greatly appreciate it. I also hope this is in the correct Forum Category.
March 15th, 2013 11:09pm
I decided to add usernames to the helpers list and the Security Filtering on the GPO is empty as I want it to apply to everything in the OU.
The OU has all the desktop/laptop computer accounts.
Free Windows Admin Tool Kit Click here and download it now
March 18th, 2013 10:49am
RESOLVED!!
I figured it out. I ran Gpresult /scope computer on my machine and one of the machines it was failing to connect to. I noticed my Remote Assistance Policy was failing to be applied even after running gpupdate /sync /boot /force.
I enforced the policy and still not working. I left the Security filtering blank because I didnt want it to be filtered. That was my error. I filtered it to "Authenticated Users" and ran the gpupdate again.
This applied the remote assistance to my and the target machine. Tested the RA, connected w/o issue.
March 18th, 2013 1:08pm
Glad to hear you found the resolution.Niki Han
TechNet Community Support
Free Windows Admin Tool Kit Click here and download it now
March 18th, 2013 11:02pm