{"id":1232,"date":"2013-03-25T21:47:33","date_gmt":"2013-03-25T21:47:33","guid":{"rendered":"http:\/\/andyparkes.co.uk\/blog\/?p=1232"},"modified":"2013-03-25T21:47:33","modified_gmt":"2013-03-25T21:47:33","slug":"working-with-uac-and-remote-assistance","status":"publish","type":"post","link":"https:\/\/andyparkes.co.uk\/blog\/index.php\/2013\/03\/25\/working-with-uac-and-remote-assistance\/","title":{"rendered":"Working with UAC and Remote Assistance"},"content":{"rendered":"<p>This a note for me as I always have to lookup which group policy setting I need. <\/p>\n<p>When using the Remote Assistance tool to help someone running Windows 7 (or Vista!) if you need to elevate via UAC you\u2019re not able to do this as the \u201chelper\u201d out of the box. The end user is supposed to respond to the UAC prompt. It\u2019s intended as security feature to prevent remote helpers making admin changes but what if you\u2019re the network admin and the end user doesn\u2019t have local admin rights? <\/p>\n<p><a href=\"https:\/\/andyparkes.co.uk\/blog\/wp-content\/uploads\/2013\/03\/image.png\"><img loading=\"lazy\" decoding=\"async\" style=\"background-image: none; border-bottom: 0px; border-left: 0px; margin: 7px 12px 7px 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top: 0px; border-right: 0px; padding-top: 0px\" title=\"image\" border=\"0\" alt=\"image\" src=\"https:\/\/andyparkes.co.uk\/blog\/wp-content\/uploads\/2013\/03\/image_thumb.png\" width=\"575\" height=\"319\" \/><\/a><\/p>\n<p>As the helper you just end up with a black screen displayed and the user is prompted for credentials they don\u2019t have and you probably don\u2019t want to give them.<\/p>\n<p><a href=\"https:\/\/andyparkes.co.uk\/blog\/wp-content\/uploads\/2013\/03\/image1.png\"><img loading=\"lazy\" decoding=\"async\" style=\"background-image: none; border-bottom: 0px; border-left: 0px; margin: 7px 12px 7px 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top: 0px; border-right: 0px; padding-top: 0px\" title=\"image\" border=\"0\" alt=\"image\" src=\"https:\/\/andyparkes.co.uk\/blog\/wp-content\/uploads\/2013\/03\/image_thumb1.png\" width=\"578\" height=\"337\" \/><\/a><\/p>\n<p>The solution is to allow remote assistance users to interact with the UAC prompt. <\/p>\n<p>It\u2019s a simple change in group policy. (or via local security policy if you <strong>really<\/strong> wanted to do it by hand!) <\/p>\n<p><strong>Local Settings\\Security Settings\\Local Policies\\Security Option<\/strong><\/p>\n<h5><font style=\"font-weight: normal\">This setting needs to be ENABLED<\/font><\/h5>\n<h5><font style=\"font-weight: normal\"><em>User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop <\/em><\/font><\/h5>\n<p>If you are a little worried about security there are still some restrictions in place that prevent just any old application from getting around UAC. <\/p>\n<blockquote>\n<p>UIA programs (User Interface Accessibility) are designed to interact with Windows and application programs on behalf of a user. This policy setting allows UIA programs to bypass the secure desktop to increase usability in certain cases; however, allowing elevation requests to appear on the interactive desktop instead of the secure desktop can increase your security risk.<\/p>\n<p>UIA programs must be digitally signed because they must be able to respond to prompts regarding security issues, such as the UAC elevation prompt. By default, UIA programs are run only from the following protected paths:<\/p>\n<ul>\n<li>\u2026\\Program Files, including subfolders <\/li>\n<li>\u2026\\Program Files (x86), including subfolders for 64-bit versions of Windows <\/li>\n<li>\u2026\\Windows\\System32 <\/li>\n<\/ul>\n<p>from: <a title=\"http:\/\/technet.microsoft.com\/en-us\/library\/dd835564(v=ws.10).aspx#BKMK_AllowUIAccess\" href=\"http:\/\/technet.microsoft.com\/en-us\/library\/dd835564(v=ws.10).aspx#BKMK_AllowUIAccess\">http:\/\/technet.microsoft.com\/en-us\/library\/dd835564(v=ws.10).aspx#BKMK_AllowUIAccess<\/a><\/p>\n<\/blockquote>\n<p>If you really wanted to lower your security you can disable this requirement too but it\u2019s probably not worth thinking about!<\/p>\n","protected":false},"excerpt":{"rendered":"<p>This a note for me as I always have to lookup which group policy setting I need. When using the Remote Assistance tool to help someone running Windows 7 (or Vista!) if you need to elevate via UAC you\u2019re not able to do this as the \u201chelper\u201d out of the box. The end user is<\/p>\n<p><a class=\"readmore\" href=\"https:\/\/andyparkes.co.uk\/blog\/index.php\/2013\/03\/25\/working-with-uac-and-remote-assistance\/\"><span class=\"arrow-right icon\"><\/span>Read More<\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[57],"tags":[],"class_list":["post-1232","post","type-post","status-publish","format-standard","hentry","category-windows"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v20.11 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Working with UAC and Remote Assistance - Andy&#039;s Techie Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/andyparkes.co.uk\/blog\/index.php\/2013\/03\/25\/working-with-uac-and-remote-assistance\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Working with UAC and Remote Assistance - Andy&#039;s Techie Blog\" \/>\n<meta property=\"og:description\" content=\"This a note for me as I always have to lookup which group policy setting I need. When using the Remote Assistance tool to help someone running Windows 7 (or Vista!) if you need to elevate via UAC you\u2019re not able to do this as the \u201chelper\u201d out of the box. The end user isRead More\" \/>\n<meta property=\"og:url\" content=\"https:\/\/andyparkes.co.uk\/blog\/index.php\/2013\/03\/25\/working-with-uac-and-remote-assistance\/\" \/>\n<meta property=\"og:site_name\" content=\"Andy&#039;s Techie Blog\" \/>\n<meta property=\"article:published_time\" content=\"2013-03-25T21:47:33+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/andyparkes.co.uk\/blog\/wp-content\/uploads\/2013\/03\/image_thumb.png\" \/>\n<meta name=\"author\" content=\"Andy Parkes\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Andy Parkes\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/andyparkes.co.uk\/blog\/index.php\/2013\/03\/25\/working-with-uac-and-remote-assistance\/\",\"url\":\"https:\/\/andyparkes.co.uk\/blog\/index.php\/2013\/03\/25\/working-with-uac-and-remote-assistance\/\",\"name\":\"Working with UAC and Remote Assistance - Andy&#039;s Techie Blog\",\"isPartOf\":{\"@id\":\"https:\/\/andyparkes.co.uk\/blog\/#website\"},\"datePublished\":\"2013-03-25T21:47:33+00:00\",\"dateModified\":\"2013-03-25T21:47:33+00:00\",\"author\":{\"@id\":\"https:\/\/andyparkes.co.uk\/blog\/#\/schema\/person\/3534e8ac6b1bec765cd061feff56679d\"},\"breadcrumb\":{\"@id\":\"https:\/\/andyparkes.co.uk\/blog\/index.php\/2013\/03\/25\/working-with-uac-and-remote-assistance\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/andyparkes.co.uk\/blog\/index.php\/2013\/03\/25\/working-with-uac-and-remote-assistance\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/andyparkes.co.uk\/blog\/index.php\/2013\/03\/25\/working-with-uac-and-remote-assistance\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/andyparkes.co.uk\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Working with UAC and Remote Assistance\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/andyparkes.co.uk\/blog\/#website\",\"url\":\"https:\/\/andyparkes.co.uk\/blog\/\",\"name\":\"Andy&#039;s Techie Blog\",\"description\":\"Professional Geek\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/andyparkes.co.uk\/blog\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/andyparkes.co.uk\/blog\/#\/schema\/person\/3534e8ac6b1bec765cd061feff56679d\",\"name\":\"Andy Parkes\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/andyparkes.co.uk\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/3824cbf53df51d7ca5cf809b6ad81a157fbfff2292e36ab8666f04ddad06bfcc?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/3824cbf53df51d7ca5cf809b6ad81a157fbfff2292e36ab8666f04ddad06bfcc?s=96&d=mm&r=g\",\"caption\":\"Andy Parkes\"},\"description\":\"Andy Parkes is Technical Director at Coventry based IT support company IBIT Solutions. Formerly, coordinator of AMITPRO and Microsoft Partner Area Lead for 2012-2013. He also isn't a fan of describing himself in the third person.\",\"sameAs\":[\"http:\/\/www.andyparkes.co.uk\/blog\"],\"url\":\"https:\/\/andyparkes.co.uk\/blog\/index.php\/author\/andyparkes\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Working with UAC and Remote Assistance - Andy&#039;s Techie Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/andyparkes.co.uk\/blog\/index.php\/2013\/03\/25\/working-with-uac-and-remote-assistance\/","og_locale":"en_US","og_type":"article","og_title":"Working with UAC and Remote Assistance - Andy&#039;s Techie Blog","og_description":"This a note for me as I always have to lookup which group policy setting I need. When using the Remote Assistance tool to help someone running Windows 7 (or Vista!) if you need to elevate via UAC you\u2019re not able to do this as the \u201chelper\u201d out of the box. The end user isRead More","og_url":"https:\/\/andyparkes.co.uk\/blog\/index.php\/2013\/03\/25\/working-with-uac-and-remote-assistance\/","og_site_name":"Andy&#039;s Techie Blog","article_published_time":"2013-03-25T21:47:33+00:00","og_image":[{"url":"https:\/\/andyparkes.co.uk\/blog\/wp-content\/uploads\/2013\/03\/image_thumb.png"}],"author":"Andy Parkes","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Andy Parkes","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/andyparkes.co.uk\/blog\/index.php\/2013\/03\/25\/working-with-uac-and-remote-assistance\/","url":"https:\/\/andyparkes.co.uk\/blog\/index.php\/2013\/03\/25\/working-with-uac-and-remote-assistance\/","name":"Working with UAC and Remote Assistance - Andy&#039;s Techie Blog","isPartOf":{"@id":"https:\/\/andyparkes.co.uk\/blog\/#website"},"datePublished":"2013-03-25T21:47:33+00:00","dateModified":"2013-03-25T21:47:33+00:00","author":{"@id":"https:\/\/andyparkes.co.uk\/blog\/#\/schema\/person\/3534e8ac6b1bec765cd061feff56679d"},"breadcrumb":{"@id":"https:\/\/andyparkes.co.uk\/blog\/index.php\/2013\/03\/25\/working-with-uac-and-remote-assistance\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/andyparkes.co.uk\/blog\/index.php\/2013\/03\/25\/working-with-uac-and-remote-assistance\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/andyparkes.co.uk\/blog\/index.php\/2013\/03\/25\/working-with-uac-and-remote-assistance\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/andyparkes.co.uk\/blog\/"},{"@type":"ListItem","position":2,"name":"Working with UAC and Remote Assistance"}]},{"@type":"WebSite","@id":"https:\/\/andyparkes.co.uk\/blog\/#website","url":"https:\/\/andyparkes.co.uk\/blog\/","name":"Andy&#039;s Techie Blog","description":"Professional Geek","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/andyparkes.co.uk\/blog\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/andyparkes.co.uk\/blog\/#\/schema\/person\/3534e8ac6b1bec765cd061feff56679d","name":"Andy Parkes","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/andyparkes.co.uk\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/3824cbf53df51d7ca5cf809b6ad81a157fbfff2292e36ab8666f04ddad06bfcc?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/3824cbf53df51d7ca5cf809b6ad81a157fbfff2292e36ab8666f04ddad06bfcc?s=96&d=mm&r=g","caption":"Andy Parkes"},"description":"Andy Parkes is Technical Director at Coventry based IT support company IBIT Solutions. Formerly, coordinator of AMITPRO and Microsoft Partner Area Lead for 2012-2013. He also isn't a fan of describing himself in the third person.","sameAs":["http:\/\/www.andyparkes.co.uk\/blog"],"url":"https:\/\/andyparkes.co.uk\/blog\/index.php\/author\/andyparkes\/"}]}},"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/pmvJ6-jS","jetpack_likes_enabled":true,"_links":{"self":[{"href":"https:\/\/andyparkes.co.uk\/blog\/index.php\/wp-json\/wp\/v2\/posts\/1232","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/andyparkes.co.uk\/blog\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/andyparkes.co.uk\/blog\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/andyparkes.co.uk\/blog\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/andyparkes.co.uk\/blog\/index.php\/wp-json\/wp\/v2\/comments?post=1232"}],"version-history":[{"count":0,"href":"https:\/\/andyparkes.co.uk\/blog\/index.php\/wp-json\/wp\/v2\/posts\/1232\/revisions"}],"wp:attachment":[{"href":"https:\/\/andyparkes.co.uk\/blog\/index.php\/wp-json\/wp\/v2\/media?parent=1232"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/andyparkes.co.uk\/blog\/index.php\/wp-json\/wp\/v2\/categories?post=1232"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/andyparkes.co.uk\/blog\/index.php\/wp-json\/wp\/v2\/tags?post=1232"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}