Remote Assistance in Corporate Environment - OfferRA not working

Can anyone help me resolve a long running issue regarding Remote Assistance on Windows 7?
We have recently upgraded many of our PCs from XP to Win7 but our Helpdesk are no longer able to use Remote Assistance on the Win7 PCs so I've been trying to get it fixed. I’ve read dozens of articles
on various forums (including this one) and tried a wide range of suggested solutions - I’ve dug into the registry, tweaked DCOM settings, modified GPOs, messed around with Teredo and PNRP settings, amended firewalls and changed permissions – all to no
avail!
This is my test setup:
Windows 2003 corporate domain
Helper and target PCs both running Windows 7 Professional 32-bit. Both PCs on same subnet (actually on adjacent desks)
Offer Remote Assistance GPO setting enabled and helper is a member of the listed group
Firewalls on both PCs have default Remote Assistance rules enabled
Target PC has Remote Assistance enabled and the Offer Remote Assistance Helpers local group is populated as per the group policy
So far, so good.
Now, Remote Assistance works fine when the target PC user solicits help through an invitation file or email (Easy Connect option not available though). However,
offering remote assistance has never worked.
This is the scenario:
Helper runs MSRA.EXE /OFFERRA and is prompted for the name or IP address of the target PC
On entering the address and clicking OK receives the message “Offering Remote Assistance: Connecting to the remote computer to get the logged in users…”
At this stage Event Viewer on the
target PC shows raserver.exe as running (which I thought a little odd as Windows 7 uses msra.exe for remote assistance). Nothing else appears on the target PC, i.e. no RA prompts
After 15secs or so an error message is displayed on the Helper PC “Your offer to help could not be sent. Check the following: Do you have the correct permissions on the remote computer
[I have]. Is the remote computer turned on and is it connected to the network [Yes and Yes]. Is there a network problem [No]. “
In the event viewer of the Helper PC the following events are logged:
Event id 9 - There was a problem interacting with COM object 833E4010-AFF7-4AC3-AAC2-9F24C1457BCE. An outdated version might be installed, or the component might not be installed at all.
Event id 13 - Remote Assistance started with: /offerRA as the command line parameters
Event id 41 - Diagnosis Repro Attempt resulted in a failure.
Event id 44 - Remote Assistance troubleshooting has confirmed the problem: Remote Assistance Easy Connect isn't available.
Event id 30 - Remote Assistance has ended.
This has been driving me crazy. Why is a supposedly simple admin tool so difficult to implement?
Anyone found a solution for this yet?

Hi,
Based on my knowledge, To offer remote assistance to a remote computer, you must belong to the Offer Remote Assistance group on the remote computer.
To resolve this issue, please check and add your account to this group.
For Offer Remote Assistance to work, a certain amount of configuration is necessary, and the computers must be within a domain. This means that you (the system administrator) can determine who can offer remote assistance within the domain.
Note If your computer is In a domain and you enable the Windows Firewall exception for Remote Assistance, Please make sure port 135 TCP is opened.
Thanks!
Andy Altmann
TechNet Community Support

Similar Messages

Bug (?) with Corporate Connectivity is (not) Working check

Noticed something odd. In situations where:
Direct Access client is offsite
their Internet access is via WiFi
they first have to enter their access credentials through a web-based captive portal before access is granted
then the Corporate Connectivity Check process malfunctions. Have seen cases where, after accessing the captive portal and being authenticated, Internet access works on the client. Direct Access then connects successfully. This is confirmed
on the server console, showing the client connected and the user credentials used. The client is able to access internal resources just fine (e.g. network drives on file servers).
But on the client itself, it still says Corporate Connectivity is Not Working. The WiFi icon is showing an exclamation mark. My belief is that this is caused by the client's inability to access Microsoft NCSI servers in a timely fashion.
So it looks like the corporate connectivity checks are dependent on Microsoft NCSI checks.
Can someone at Microsoft please look into this, as it is confusing our users (not to mention us guys in IT who have only just discovered this odd behaviour!).

Hi Steven !
Thanks a lot for your guidance !
After I followed the steps, I found that the time out occurs when trying to resolve the internal domain name.
The Windows Firewall was enabled on all profiles ( active on the public )
There were no IPsec sessions established in the Security associations tab, so I enabled the audit policy of the IPsec as per your instructions.
There is reoccurring error in the Security log :
Date:          10/8/2014 10:08:49 AM
Event ID:      4653
Task Category: IPsec Main Mode
Level:         Information
Keywords:      Audit Failure
User:          N/A
Computer:      MyW8Client
Description:
An IPsec main mode negotiation failed.
Local Endpoint:
Local Principal Name: -
Network Address: MyW8Client_Ipv6 address
Keying Module Port: 500
Remote Endpoint:
Principal Name:  -
Network Address: MY_DA_Servert Ipv6 address
Keying Module Port: 500
Additional Information:
Keying Module Name: AuthIP
Authentication Method: Unknown authentication
Role:   Initiator
Impersonation State: Not enabled
Main Mode Filter ID: 180987
Failure Information:
Failure Point:  Local computer
Failure Reason:  Negotiation timed out
State:   Sent first (SA) payload
Initiator Cookie:  9e636863e513b367
Responder Cookie: 0000000000000000
As far as I understand - the connection can not be established due to certificate error, which in my case is strange since my DA configuration is set to not use computer certificates, only Kerberos.
I will keep digging but any additional tip/advice will be appreciated!
Thanks again, Steven!
P.S. Just noticed that the Event ID 4653 produce two types of "Failure Reason" - apart from "Negotiation timed out" I also get "No policy configured"

After acceessing home screen with assistive touch auto lock is not working in my iphone 4S after upgrading to ios6

After acceessing home screen with assistive touch auto lock is not working in my iphone 4S after upgrading to ios6

Additional testing i perform to make wifi work but nothing works out:
i did re-installing the software using iTunes, reset the network settings restarting the phone. Nothing solves my problem.
wifi was working with older software versions. i think there should be a problem with 8.1.1.
is anyone has fix for this issue?

TS1538 red dot glowing on proximity sensor of my iphone 4 and it is dead. it is not connecting with itunes. tried hard reset it's not working as well. also followed iphone troubleshooting assistant but also it's not working. what am i supposed to do now?

red dot glowing on proximity sensor of my iphone 4 and it is dead. it is not connecting with itunes. tried hard reset it's not working as well. also followed iphone troubleshooting assistant but also it's not working. what am i supposed to do now?

Make an appointment at the Genius Bar at your local Apple Store or take the phone into an Authorized Apple Service provider.

I can't lock screen on Ipad mini. My lock screen button is working for shutdowning Ipad, but don't working for lock screen. Also I tried to lock screen from Assistive Touch and it's not working. When I click lock screen on assistive it nothing happens.

I can't lock screen on Ipad mini. My lock screen button is working for shutdowning Ipad, but don't working for lock screen. Also I tried to lock screen from Assistive Touch and it's not working. When I click lock screen on assistive touch it nothing happens.

Thank you for that update.
I would next backup your device to iTunes with this article:
iOS: How to back up and restore your content
http://support.apple.com/kb/HT1766
And restore it first as a new device, and verify that it works properly, then restore from your backup with the same article below to ensure that it is still working.
Use iTunes to restore your iOS device to factory settings
http://support.apple.com/kb/ht1414
If it does not work correctly when you set up the phone as a new device, I would next seek service for your iPad:
http://www.apple.com/support/ipad/repair/other/
Thank you for using Apple Support Communities.
All the best,
Sterling

Remote Desktop and Windows Firewall Settings Not Working,

Hi to all....
In My office am using Windows 7 ultimate x64 OS,Remote Desktop is Not working for Reason is Firewall is Turn on,i go to Control Panel Settings to turn off the Firewall,But Firewall Setting are Not Working
i Traced the Event Viewer its shows Error Code 5, Am search any patches for this error but cannot find it, Any one Advice Me.....i Hope Your Valuable Reply.....

Hello,
this forum is related to Windows Server. For Windows 7 please ask in
http://social.technet.microsoft.com/Forums/windows/en-US/home?category=w7itpro
Best regards
Meinolf Weber
MVP, MCP, MCTS
Microsoft MVP - Directory Services
My Blog: http://blogs.msmvps.com/MWeber
Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.
Twitter:

Remote Desktop Connection to VM does not work after sysprep

Hello altogether.
Often asked, but never answered with an applicable solution!
What shall
we
do if
we
get no access to a Azure VM via Remote Desktop
Connection?
Everything went well: access to the VM via RDC was working perfectly!
Then
the idea came into
our
mind to create an image of the VM by use of the Azure Management Portal.
We
found that
we
had to apply “sysprep”
on the VM.
We
did it.
Then we did not take the image and decided to go on with the VM.
But if we start the VM we get no access via RDC!
We tried to find a solution by reviewing the already published contributions by other Azure
users. But none of the replies marked as answered supply with a qualified solution.
So can one provide a really applicable solution to us on how to arrange the further use of the VM?
Thank you in advance.

There is an issue right now where the VM may start unexpectedly after you have run sysprep and selected the shutdown option (which is normally what you should do).
http://social.msdn.microsoft.com/Forums/windowsazure/en-US/fafb9ee6-1e57-46ba-8440-27467ad986cf/image-capture-issue-vm-unexpectedly-started-after-guestinitiated-shutdown?forum=WAVirtualMachinesforWindows
But regardless of that issue - you can't use that deployed instance of the VM after you've run sysprep on it. It needs to stay shutdown, then you select Capture to create an image from it.
If you start it back up, either intentionally, or it is started unexpectedly because of the issue above, it will be sitting at the first interactive screen of setup. RDP is not working at that point, and since there is no console access to an Azure VM, there
is no way to get past that prompt.
For other scenarios, you might be able to attach the OS disk of that VM as a data disk to another VM, and while you could do that in this case too, there is no supported method for disabling sysprep at that stage of setup.
So while you could attach it to another VM to get data off of it (you would have to remove the VM first), the VHD is no longer in a supported state to use as a VM itself.
Thanks,
Craig

Remote LAN Name Resolution on VPN not working after upgrading to iOS8

Has anyone come across the problem since upgrading to iOS8 where remote LAN name resolution does not work when connected to the remote LAN with VPN. Everything worked fine on iOS7 and continues to work okay on devices that have not been upgraded.
If I'm connected with WiFi on the local network, I am able to resolve the FQDN to a local IP address. The problem arises when I'm away from the office, on either LTE or another WiFi and I start a VPN connection to the office. The VPN connects without any problems. If I try to connect to a desktop with the FQDN it never connects. I will work if I connect with the IP address. If I try to do an nslookup of the FQDN, I don't get a response. I am however able to get a response when performing an nslookup for google.com.
The VPN we are using is PPTP to a Windows network.

Has anyone come across the problem since upgrading to iOS8 where remote LAN name resolution does not work when connected to the remote LAN with VPN. Everything worked fine on iOS7 and continues to work okay on devices that have not been upgraded.
If I'm connected with WiFi on the local network, I am able to resolve the FQDN to a local IP address. The problem arises when I'm away from the office, on either LTE or another WiFi and I start a VPN connection to the office. The VPN connects without any problems. If I try to connect to a desktop with the FQDN it never connects. I will work if I connect with the IP address. If I try to do an nslookup of the FQDN, I don't get a response. I am however able to get a response when performing an nslookup for google.com.
The VPN we are using is PPTP to a Windows network.

Qosmio G40: Toshiba Assist, StartLiveTV,Dolby (others?) not working anymore

After installing Win7 Ultimate including all latest drivers downloaded from the Toshiba website, the following applications do not work anymore:
1) Toshiba Assist
The application (TInTouch.exe) loads but ends up with a blank screen.
2) TV button linked to TV
The StartLiveTV.exe application is loaded, it appears in TaskManager, but closes automatically not doing anything. When running Vista it launched Windows Media Center.
3) Dolby Button linked to Dolby
This should launch C:\Program Files\Dolby\Dolby Control Center\DolbyVistaConfig.exe but the application is gone and i cannot find a replacement on the Toshiba Website. (Latest sounddrivers are installed but Dolby application is missing)
Any thoughts on the 3 topics?

Yep,
1) TVAP
i already removed the TVAP, downloaded it again and installed it again.
2) BIOS
I'm at the latest Bios, v2.20

Corporate Email does not work with iPhone

I'm not a tech wiz so my apologies if this is very elementary. My IT guy said the iPhones will not work with MS Exchange on our server. We currently support Blackberry and Windows Mobile devices such as the Q, Treos, Blackjack. He did mention that my email could work through the POP server, but it wasn't secure. I've tried setting up the POP email to pull my corporate email, but keep getting the Authentication Failure message. Any suggestions on what to try?

If Windows mobile devices can connect using ActiveSync, then your iPhone should be able to connect the same way.
I used a HTC TytnII to sync my mail, calendar et contacts. I got the iphone and entered the exact same informations (server IP adress, user name and login) and it just worked.
You need however to know the exact capitalization of your email adress, as described in your MS Exchange server. To know that, create a message in outlook, enter your name in the "to" field and double-click on your name. In the information box, you should have numerous tabs, and the last one gives you the capitalization (in the "SMTP" field).
Good luck

Remote App and Desktop Login Does NOT work

Hello there,
I have an easy one for you all. I am running Windows Server 2012 R2 Datacenter off a server at a university. This server is only intended to be shared with ~10 people doing various tasks like using programs installed and storing data. As
of now, I only have been able to do RDP from home with it. Having tried to setup remote app and desktop, it only works on the server itself and not on other computers, both on the same subnet and a completely different IP address altogether. Let
me break down my questions:
1. Though the security certificate is installed in Trusted Root Authorities, but the site is only trusted on the server and not on any of the other computers. How do I get the others to trust it?
2. Number 1 except this occurs in the Remote Desktop and App window as well.
3. Adding users would be under active directory administrative center-->[my server]-->Users-->Add right? I guess I cannot play with 'User Accounts' in control panel anymore.
Any help would be appreciated. Also, if anyone thinks I am better off doing other things like virtual desktop, then I am all ears. I just want to keep things as simple as possible.
Regards,
Ben

Hi,
Firstly, how to you reach the server from Internet, via host name, public IP address or VPN?
If you need to remote to the server via host name, can you nslookup the host name and get the correct public IP address of it?
Do you install the AD DS role on the server? Please let us know if you need the active directory environment.
Thanks.
Jeremy Wu
TechNet Community Support

ILM assistant XDB username and password not working

Hi All,
Hi I'm using ILM 1.3 with Oracle 11g on HP.
I am able to log-in to apex server but not ILM assistant.
http://dblxamd02.vxindia.veritas.com:8080/apex/apex_admin it works with admin/oracle.
But im not able to login to http://dblxamd02.vxindia.veritas.com:8080 when it asks for XDB username and password.
I tried to reset the password using apxxepwd.sql but not luck.
Did anybody observer this issue ? if so can somebody please reply me ASAP ?
Thanks in advance.

There are two wats to install the ILM toolkit:
1) Directly on the server where your instance is located. In this case you do not need to provide a TNS connection name. Therefore, you would execute the script as follows:
@ilma_install.sql pune
2) Remotely from a client. In this case you do need to provide a connection string to your remote database instance. Therefore, you would execute the script as follows:
@ilma_install.sql pune@11
in this scenario the connection details are derived from your TNSNAMES.ORA file. If you have multiple Oracle products installed you have multiple copies of this file and it can be difficult to track down which file is being used. To point to a specific TNSNAMES.ORA I normally set three parameters:
ORACLE_HOME - points to your 11g Client installation directory
PATH - point this to the Oracle home containing SQLPlus, usually this is ORACLE_HOME/bin
TNS_ADMIN = ORACLE_HOME/network/admin
then make sure the TNSNAMES.ORA contains a reference to your identifier "11". You can test the connection by using the TNSPING utility that is part of the 11g client installation. The format for your instance would be:
TNSPING 11
this will tell you if you can connect to your instance. If there are any issues check the connection via the Net Configuration Assistant, or you can edit the TNSNAMES.ORA file directly via Notepad.
Hope this helps
Keith

Remote Desktop and Brother MFC-6490CW not working

I have installed a Brother MFC-6490CW on my iMac 20" Intel with Leopard 10.5.6 and have had no problems getting to work using local mac programs printing through the USB cable.
I cannot get it to work correctly when I log into my Windows 2003 Terminal Server and print to the local Brother printer.
Originally, I had not installed the driver on the server and the connection would use the standard Apple LaserWriter 8500 driver. This was fine for as long as you only wanted black & white 8.5x11.
I then installed the driver only on the server and was asked more questions than usual. I had to pick out whether it was a USB or ethernet printer off of the server. Since it is neither, I just selected LPT1 and hoped the remote desktop would ignore it and sent it to the virtual port.
It does send get sent back to the Mac, but I get the error 'client-error-not-psossible' from the Mac printer spooler.
Brother support was useless, they said it must be a Microsoft problem. It is amazing that these little disposable $100 printers work fine, but the expensive networkable Brother printer won't. I suspect it is only a configuration problem on the server, but do not know what to do.
Thanks for the time......

Mac Skoog –
I have a few questions for you on this –
- Is the printer and Server in the same location.
- Can I assume that the printer is currently connected to the Mac.
Here are some things to consider –
When connecting to a Windows system via RDP windows will attempt to connect to the default printer of the computer (Host System) running the Remote Desktop Client. This only works if the connecting system (Windows 2003 server) has the same drive loaded/available as the host system. I have seen issues with RDP not playing well with USB printers or rather USB printers with ‘special’ drivers.
If the systems are together might I suggest that you connect the printer to the server directly via the network –
http://www.fullerton.edu/it/services/Networks/faq/PDF/network_printer.pdf
Once you do this then you won’t need to connect to the printer connected to the Mac.
Respectfully –
BH

Windows 2008 R2 Remote Desktop Services - user profile path not working

Trying to setup remote desktop profiles. We have 1 farm with 2 Windows 2008R2 RD session hosts and a broker server and want the all of the remote user profiles to reside on a dedicated profile server. We've created the user shares but when a remote
user logs in their user profiles is automatically created on the session hosts. Each remote users profile path is specified in AD under the user's Remote Desktop Profile tab.
I've seen posts about creating a GPO to handle roaming profiles but I'm not sure as to where this needs to be created...should it be done on each of the session hosts? Are their any step by step instructions out there on how to achieve this that I just haven't
found yet?
bl

Hi,
Thank you for posting in Windows Server Forum.
Do you have RD Gateway setup in your environment?
Have you configure RD Connection Broker and set the Fully Qualified Domain Name (FQDN) of the RD Connection Broker server in case of RD Connection Broker mode. In RD Session mode, it is set to the FQDN of the RD Web Access server.
Client operating systems must trust the certificate with which the RemoteApp programs are signed. Suggest to install RDP 8.1 for client OS.
Do you have a trusted certificate with a matching name configured on your RDSH server in RD Session Host Configuration? (Means cert must match the name that clients use to connect to it for running the RemoteApp).
Hope it helps!
Thanks.
Dharmesh Solanki

SMF environment variables not working

I have a Glassfish application in SMF with the following manifest file. I am trying to set the JAVA_HOME to /usr/jdk/latest.
svccfg -s svc:/application/SUNWappserver/domain1 setenv -m stop JAVA_HOME /usr/jdk/latest
svccfg -s svc:/application/SUNWappserver/domain1 setenv -m start JAVA_HOME /usr/jdk/latest
svcadm refresh svc:/application/SUNWappserver/domain1:default
# svcs -av |grep appser
online - 12:22:51 249170 svc:/application/SUNWappserver/domain1:default
# svccfg -s svc:/application/SUNWappserver/domain1 listprop | grep JAVA
start/environment astring JAVA_HOME=/usr/jdk/latest
stop/environment astring JAVA_HOME=/usr/jdk/latest
I have a default instance and the stop/start methods are not defined inside it. After the refresh and restart, I still don't see Java using the /usr/jdk/latest JDK. Does anyone know why?
Do those variables need to be defined inside the "default1" instance? If so, how do I do that with svccfg?
<service_bundle type="manifest"
name="SUNWasu appserver services">
<service name="application/SUNWappserver/domain1"
version="1"
type="service">
<single_instance/>
<exec_method type="method"
name="start"
exec="/usr/local/glassfish/bin/asadmin start-domain --user admin --passwordfile /usr/local/glassfish/passfile --domaindir /usr/local/glassfish/domains domain1"
timeout_seconds="0">
<method_context working_directory=":default">
<method_credential user="root"
group=":default"/>

</method_context>
<stability value="Evolving"/>
</exec_method>
<exec_method type="method"
name="stop"
exec="/usr/local/glassfish/bin/asadmin stop-domain --domaindir /usr/local/glassfish/domains domain1"
timeout_seconds="0">
<method_context working_directory=":default">
<method_credential user="root"
group=":default"/>
</method_context>
<stability value="Evolving"/>
</exec_method>
<instance name="default" enabled="false">
<dependency
name='network'
grouping='require_all'
restart_on='none'
type='service'>
<service_fmri value='svc:/milestone/network:default' />
</dependency>

<dependency
name='filesystem-local'
grouping='require_all'
restart_on='none'
type='service'>
<service_fmri value='svc:/system/filesystem/local:default' />
</dependency>
</instance>
<stability value="Evolving"/>
<template>
<common_name>
<loctext xml:lang="C"> Appserver Domain Administration Server </loctext>
</common_name>
<documentation>
<manpage title="Appserver" section="1" manpath="/opt/SUNWappserver/appserver/man"/>
</documentation>
</template>
</service>
</service_bundle>

You're right....... it worked.
The Content Server is case sensitive and the documentation is wrong......
Thanks!

Remote Assistance in Corporate Environment - OfferRA not working

Similar Messages

Maybe you are looking for