Forum Discussion

Nathan_Pfeifer's avatar
Nathan_Pfeifer
Brass Contributor
Apr 27, 2022

Remote assistance with Quick Assist is changing

  Hi Insiders! Russell Mosier and Bianca Taylor, from the Experiences + Devices team are excited to share an upcoming change to their remote assistance app, Quick Assist.   Remote assistance wi...
Microsoft 365 Insider
GreatToHearFromYou's avatar
GreatToHearFromYou
Brass Contributor
May 24, 2022
This has always been a problem with us, because we do not for any reason allow our users to run programs with elevated rights (and neither should your school!!). For this reason we have disabled secure desktop (desktop dimming) during User Account Control - it is much safer to turn that function off then to provide users with elevated rights. In this link you will find many ways on how to accomplish this: https://www.windowscentral.com/how-enable-desktop-access-during-user-account-control-prompt-windows-10
VrijCLB_Bart's avatar
VrijCLB_Bart
Copper Contributor
May 25, 2022

No worries GreatToHearFromYou 😉 , users don't have elevated rights. It's solely the QA-icon that's opened with elevated rights via the software distribution (ZENworks). We already tried all kind of possible (gpo) solutions but they don't change anything in the recent W10 (21H2).

If you have a look at W10 documentation it seems defaults for "User Account Control"-settings also changed after recent W10 updates.

  • GreatToHearFromYou's avatar
    GreatToHearFromYou
    Brass Contributor
    May 25, 2022

    VrijCLB_Bart Ah, that is great to hear. Unfortunately, I still read way too many times where businesses allow admin rights for end users or allow them to run/install "rogue" software. This just can't be done anymore (not that it was ever good), especially now with the huge up rise of malicious software and actors. 

    Anyway, back on topic. We are currently on 21H1 and I will be creating our 21H2 image soon, so I may experience the same problem you are currently having. If I find an easy solution, I will definitely share.

    • JamesM's avatar
      JamesM
      Brass Contributor
      May 25, 2022

      Took 4 days of research and testing to deploy this, finally settled on intunewin with both an installation and detection script

       

      For anyone looking for Intune solution the answer is on reddit.

Resources