SBS 2003 Offer Remote Assistance - Permission Denied

After applying security updates, I no longer am able to Offer Remote
Assistance to any computers on the network from the SBS 2003 server. I get an
error message: "Permission Denied".

Fay4 wrote:
> After applying security updates, I no longer am able to Offer Remote
> Assistance to any computers on the network from the SBS 2003 server. I get an
> error message: "Permission Denied".
What exact security updates?
Missing Help and Support service:
RESOLUTION: Reinstall the service.
http://blogs.technet.com/sbs/archive...ce-pack-2.aspx

I do not recall specific Security Updates.

Help and Support service is not missing. I am running SBS 2003 SP2 for quite
a while already.

In Help and Support service, when I enter name of any of the computers,
listed under Client Coputers on the Server Managerment Console, I get a
pop-up error message "Permission Denied"


"Susan Bradley" wrote:

> Fay4 wrote:
> > After applying security updates, I no longer am able to Offer Remote
> > Assistance to any computers on the network from the SBS 2003 server. I get an
> > error message: "Permission Denied".
> What exact security updates?
> Missing Help and Support service:
> RESOLUTION: Reinstall the service.
> http://blogs.technet.com/sbs/archive...ce-pack-2.aspx
>

Fay4 wrote:
> I do not recall specific Security Updates.
>
> Help and Support service is not missing. I am running SBS 2003 SP2 for quite
> a while already.
>
> In Help and Support service, when I enter name of any of the computers,
> listed under Client Coputers on the Server Managerment Console, I get a
> pop-up error message "Permission Denied"
>
>
> "Susan Bradley" wrote:
>
>> Fay4 wrote:
>>> After applying security updates, I no longer am able to Offer Remote
>>> Assistance to any computers on the network from the SBS 2003 server. I get an
>>> error message: "Permission Denied".
>> What exact security updates?
>> Missing Help and Support service:
>> RESOLUTION: Reinstall the service.
>> http://blogs.technet.com/sbs/archive...ce-pack-2.aspx
>>
Go into Microsoft update.
Click on update history.
What are the patches that got installed based on date?

Here is the list of recently installed updates:
Windows Server 2003 Microsoft .NET Framework 3.0 Service Pack 1 (KB929300)
(x86) Friday, November 21, 2008 Microsoft Update
Windows Server 2003 SII - Printers - Smart Label Printer 450 Friday,
November 21, 2008 Microsoft Update
Windows Server 2003 Group Policy Preference Client Side Extensions for
Windows Server 2003 (KB943729) Friday, November 21, 2008 Microsoft Update
Windows Server 2003 Advanced Micro Devices - Other Hardware - AMD Processor
Friday, November 21, 2008 Microsoft Update
Windows Server 2003 Windows Malicious Software Removal Tool - November 2008
(KB890830) Sunday, November 16, 2008 Automatic Updates
Windows Server 2003 Security Update for Windows Server 2003 (KB957097)
Sunday, November 16, 2008 Automatic Updates
Windows Server 2003 Security Update for Microsoft XML Core Services 6.0
Service Pack 2 (KB954459) Sunday, November 16, 2008 Automatic Updates
Windows Server 2003 Security Update for Microsoft XML Core Services 4.0
Service Pack 2 (KB954430) Sunday, November 16, 2008 Automatic Updates
Windows Server 2003 Security Update for Windows Server 2003 (KB955069)
Sunday, November 16, 2008 Automatic Updates
SQL Server Security Update for SQL Server 2000 Service Pack 4 (KB948110)
Saturday, November 08, 2008 Automatic Updates
Windows Server 2003 Security Update for Windows Server 2003 (KB948590)
Saturday, November 08, 2008 Automatic Updates
Windows Server 2003 Security Update for Windows Server 2003 (KB948745)
Saturday, November 08, 2008 Automatic Updates
Windows Server 2003 Security Update for Outlook Express for Windows Server
2003 (KB951066) Saturday, November 08, 2008 Automatic Updates
Windows Server 2003 Security Update for Windows Server 2003 (KB950974)
Saturday, November 08, 2008 Automatic Updates
Windows Server 2003 Update for Windows Server 2003 (KB951072) Saturday,
November 08, 2008 Automatic Updates
Windows Server 2003 Security Update for Windows Server 2003 (KB951746)
Saturday, November 08, 2008 Automatic Updates
Windows Server 2003 Security Update for Windows Server 2003 (KB956803)
Saturday, November 08, 2008 Automatic Updates
Windows Server 2003 Cumulative Security Update for Internet Explorer 6 for
Windows Server 2003 (KB956390) Saturday, November 08, 2008 Automatic Updates

Windows Server 2003 Security Update for Windows Server 2003 (KB938464)
Saturday, November 08, 2008 Automatic Updates
Windows Server 2003 Security Update for Windows Server 2003 (KB945553)
Saturday, November 08, 2008 Automatic Updates
Windows Server 2003 Security Update for Windows Server 2003 (KB958644)
Saturday, November 08, 2008 Automatic Updates
Windows Server 2003 Security Update for Microsoft XML Core Services 6.0 and
Microsoft XML Core Services 6.0 Service Pack 1 (KB933579) Saturday, November
08, 2008 Automatic Updates
Windows Server 2003 Security Update for Windows Server 2003 (KB950762)
Saturday, November 08, 2008 Automatic Updates
Windows Server 2003 Windows Malicious Software Removal Tool - October 2008
(KB890830) Saturday, November 08, 2008 Automatic Updates
Windows Server 2003 Security Update for Windows Server 2003 (KB951748)
Saturday, November 08, 2008 Automatic Updates
Windows Server 2003 Update for Windows Server 2003 (KB948496) Saturday,
November 08, 2008 Automatic Updates
Windows Server 2003 Security Update for Windows Server 2003 (KB954211)
Saturday, November 08, 2008 Automatic Updates
Windows Server 2003 Security Update for Windows Server 2003 (KB942830)
Saturday, November 08, 2008 Automatic Updates
Windows Server 2003 Security Update for Windows Server 2003 (KB957095)
Saturday, November 08, 2008 Automatic Updates
Windows Server 2003 Security Update for Windows Server 2003 (KB942831)
Saturday, November 08, 2008 Automatic Updates
Windows Server 2003 Security Update for Windows Server 2003 (KB956841)
Saturday, November 08, 2008 Automatic Updates
Windows Server 2003 Security Update for Windows Server 2003 (KB951698)
Saturday, November 08, 2008 Automatic Updates
Windows Server 2003 Security Update for Windows Server 2003 (KB943055)
Saturday, November 08, 2008 Automatic Updates
Windows Server 2003 Cumulative Security Update for ActiveX Killbits for
Windows Server 2003 (KB956391) Saturday, November 08, 2008 Automatic Updates

Windows Server 2003 Security Update for Windows Server 2003 (KB946026)
Saturday, November 08, 2008 Automatic Updates
Windows Server 2003 Security Update for Windows Server 2003 (KB949014)
Saturday, November 08, 2008 Automatic Updates
Windows Server 2003 Security Update for Windows Server 2003 (KB952954)
Saturday, November 08, 2008 Automatic Updates
Windows Server 2003 Security Update for Windows Server 2003 (KB944338)
Saturday, November 08, 2008 Automatic Updates
Windows Windows Update Agent 7.2.6001.784 Thursday, November 06, 2008
Automatic Updates





"Susan Bradley" wrote:

> Fay4 wrote:
> > I do not recall specific Security Updates.
> >
> > Help and Support service is not missing. I am running SBS 2003 SP2 for quite
> > a while already.
> >
> > In Help and Support service, when I enter name of any of the computers,
> > listed under Client Coputers on the Server Managerment Console, I get a
> > pop-up error message "Permission Denied"
> >
> >
> > "Susan Bradley" wrote:
> >
> >> Fay4 wrote:
> >>> After applying security updates, I no longer am able to Offer Remote
> >>> Assistance to any computers on the network from the SBS 2003 server. I get an
> >>> error message: "Permission Denied".
> >> What exact security updates?
> >> Missing Help and Support service:
> >> RESOLUTION: Reinstall the service.
> >> http://blogs.technet.com/sbs/archive...ce-pack-2.aspx
> >>
> Go into Microsoft update.
> Click on update history.
> What are the patches that got installed based on date?
>

Hello,

Thank you for posting here.

According to your description, I understand that:

You receive the "permission denied" error when you provide remote
assistance to client computers from the SBS 2003 SP2 server.

If I have misunderstood the problem, please don't hesitate to let me know.

First of all, please check whether you can connect the client computer with
client's IP address instead of the client computer name.

310629 Permission Denied Error When You Are Using Offer
Remote Assistance
http://support.microsoft.com/default...b;EN-US;310629

If the issue persists even when you use the IP address to connect the
client computer, please follow the suggestions below to narrow down the
issue.

Suggestions #1:
=======================
By default, in the SBS 2003 environment, the SBS Remote Assistance Policy
define the Domain Admins group members can control the client computer via
remote assistance. Please make sure that all client computers have the
applied this GPO and allow the Domain Admins remote control the computer.
To verify that, you can run GPresult /v on the problematic client computer
to show all applied group policy settings. Is the Offer Remote Assistant
setting applied on the client?

Suggestions #2:
=======================
In the SBS 2003 environment, the SBS Windows Firewall define the firewall
exception on the client computers to allow the remote assistance. Please
make sure on the clients the remote assistance is listed in the Windows
Firewall exceptions list.

Suggestions #3:
=======================
Moreover, on the problematic clients verify whether the Offer Remote
Assistance Helpers group have the proper permission on the Microsoft help
and support services. To check that:

1. On the client, run "dcomcnfg" to open the Component Service MMC.
2. Locate the Microsoft help and support services in Component
services-->My computer--->DCOM Config
3. Right click Microsoft help and support
services--->Properties--->Security tab--->Edit button in Lunch and
Activation permissions.
4. Make sure that the Offer Remote Assistance Helpers group has been
granted the lunch permission (local and remote) and activation permission
(local and remote).
5. If either of the permission is missing, check how it works if you
manually add it.


More information for your information:

884910 You cannot offer remote assistance to a user whose computer
is running Windows XP Service Pack 2
http://support.microsoft.com/default...b;EN-US;884910

Hope it helps. If you have any questions or concerns, please do not
hesitate to let me know.




Best regards,
Miles Li

Microsoft Online Partner Support
Microsoft Global Technical Support Center

Get Secure! - www.microsoft.com/security
================================================== ===
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
================================================== ===
This posting is provided "AS IS" with no warranties, and confers no rights.

Hello Miles,

I check all the items you listed and they are all ok. It does not look like
Help and Support Offer Remote Assistance even has a chance to try to connect
to the Remote computer. Since as soon as I type in the name of the remote
computer (applies to all client computers part of the domain) and click
Connect, I get a Permissions Denied dialogue pop-up immediately.

"Miles Li [MSFT]" wrote:

> Hello,
>
> Thank you for posting here.
>
> According to your description, I understand that:
>
> You receive the "permission denied" error when you provide remote
> assistance to client computers from the SBS 2003 SP2 server.
>
> If I have misunderstood the problem, please don't hesitate to let me know.
>
> First of all, please check whether you can connect the client computer with
> client's IP address instead of the client computer name.
>
> 310629 Permission Denied Error When You Are Using Offer
> Remote Assistance
> http://support.microsoft.com/default...b;EN-US;310629
>
> If the issue persists even when you use the IP address to connect the
> client computer, please follow the suggestions below to narrow down the
> issue.
>
> Suggestions #1:
> =======================
> By default, in the SBS 2003 environment, the SBS Remote Assistance Policy
> define the Domain Admins group members can control the client computer via
> remote assistance. Please make sure that all client computers have the
> applied this GPO and allow the Domain Admins remote control the computer.
> To verify that, you can run GPresult /v on the problematic client computer
> to show all applied group policy settings. Is the Offer Remote Assistant
> setting applied on the client?
>
> Suggestions #2:
> =======================
> In the SBS 2003 environment, the SBS Windows Firewall define the firewall
> exception on the client computers to allow the remote assistance. Please
> make sure on the clients the remote assistance is listed in the Windows
> Firewall exceptions list.
>
> Suggestions #3:
> =======================
> Moreover, on the problematic clients verify whether the Offer Remote
> Assistance Helpers group have the proper permission on the Microsoft help
> and support services. To check that:
>
> 1. On the client, run "dcomcnfg" to open the Component Service MMC.
> 2. Locate the Microsoft help and support services in Component
> services-->My computer--->DCOM Config
> 3. Right click Microsoft help and support
> services--->Properties--->Security tab--->Edit button in Lunch and
> Activation permissions.
> 4. Make sure that the Offer Remote Assistance Helpers group has been
> granted the lunch permission (local and remote) and activation permission
> (local and remote).
> 5. If either of the permission is missing, check how it works if you
> manually add it.
>
>
> More information for your information:
>
> 884910 You cannot offer remote assistance to a user whose computer
> is running Windows XP Service Pack 2
> http://support.microsoft.com/default...b;EN-US;884910
>
> Hope it helps. If you have any questions or concerns, please do not
> hesitate to let me know.
>
>
>
>
> Best regards,
> Miles Li
>
> Microsoft Online Partner Support
> Microsoft Global Technical Support Center
>
> Get Secure! - www.microsoft.com/security
> ================================================== ===
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> ================================================== ===
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
>
>

Another reason why I think it is something on the server is that because when
I try to run Computer Policy Result Wizzard on the sever (for any computer
other than the server itself) I get an error dialogue pop-up Group Policy
Eror: You do not have permission to perform this operation, Details: Access
denied.

"Fay4" wrote:

> Hello Miles,
>
> I check all the items you listed and they are all ok. It does not look like
> Help and Support Offer Remote Assistance even has a chance to try to connect
> to the Remote computer. Since as soon as I type in the name of the remote
> computer (applies to all client computers part of the domain) and click
> Connect, I get a Permissions Denied dialogue pop-up immediately.
>
> "Miles Li [MSFT]" wrote:
>
> > Hello,
> >
> > Thank you for posting here.
> >
> > According to your description, I understand that:
> >
> > You receive the "permission denied" error when you provide remote
> > assistance to client computers from the SBS 2003 SP2 server.
> >
> > If I have misunderstood the problem, please don't hesitate to let me know.
> >
> > First of all, please check whether you can connect the client computer with
> > client's IP address instead of the client computer name.
> >
> > 310629 Permission Denied Error When You Are Using Offer
> > Remote Assistance
> > http://support.microsoft.com/default...b;EN-US;310629
> >
> > If the issue persists even when you use the IP address to connect the
> > client computer, please follow the suggestions below to narrow down the
> > issue.
> >
> > Suggestions #1:
> > =======================
> > By default, in the SBS 2003 environment, the SBS Remote Assistance Policy
> > define the Domain Admins group members can control the client computer via
> > remote assistance. Please make sure that all client computers have the
> > applied this GPO and allow the Domain Admins remote control the computer.
> > To verify that, you can run GPresult /v on the problematic client computer
> > to show all applied group policy settings. Is the Offer Remote Assistant
> > setting applied on the client?
> >
> > Suggestions #2:
> > =======================
> > In the SBS 2003 environment, the SBS Windows Firewall define the firewall
> > exception on the client computers to allow the remote assistance. Please
> > make sure on the clients the remote assistance is listed in the Windows
> > Firewall exceptions list.
> >
> > Suggestions #3:
> > =======================
> > Moreover, on the problematic clients verify whether the Offer Remote
> > Assistance Helpers group have the proper permission on the Microsoft help
> > and support services. To check that:
> >
> > 1. On the client, run "dcomcnfg" to open the Component Service MMC.
> > 2. Locate the Microsoft help and support services in Component
> > services-->My computer--->DCOM Config
> > 3. Right click Microsoft help and support
> > services--->Properties--->Security tab--->Edit button in Lunch and
> > Activation permissions.
> > 4. Make sure that the Offer Remote Assistance Helpers group has been
> > granted the lunch permission (local and remote) and activation permission
> > (local and remote).
> > 5. If either of the permission is missing, check how it works if you
> > manually add it.
> >
> >
> > More information for your information:
> >
> > 884910 You cannot offer remote assistance to a user whose computer
> > is running Windows XP Service Pack 2
> > http://support.microsoft.com/default...b;EN-US;884910
> >
> > Hope it helps. If you have any questions or concerns, please do not
> > hesitate to let me know.
> >
> >
> >
> >
> > Best regards,
> > Miles Li
> >
> > Microsoft Online Partner Support
> > Microsoft Global Technical Support Center
> >
> > Get Secure! - www.microsoft.com/security
> > ================================================== ===
> > When responding to posts, please "Reply to Group" via your newsreader so
> > that others may learn and benefit from your issue.
> > ================================================== ===
> > This posting is provided "AS IS" with no warranties, and confers no rights.
> >
> >
> >

I was able to resolve the Remote Assistance problem by adding following
Registy key on the SBS 2003 server:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole


"Fay4" wrote:

> Another reason why I think it is something on the server is that because when
> I try to run Computer Policy Result Wizzard on the sever (for any computer
> other than the server itself) I get an error dialogue pop-up Group Policy
> Eror: You do not have permission to perform this operation, Details: Access
> denied.
>
> "Fay4" wrote:
>
> > Hello Miles,
> >
> > I check all the items you listed and they are all ok. It does not look like
> > Help and Support Offer Remote Assistance even has a chance to try to connect
> > to the Remote computer. Since as soon as I type in the name of the remote
> > computer (applies to all client computers part of the domain) and click
> > Connect, I get a Permissions Denied dialogue pop-up immediately.
> >
> > "Miles Li [MSFT]" wrote:
> >
> > > Hello,
> > >
> > > Thank you for posting here.
> > >
> > > According to your description, I understand that:
> > >
> > > You receive the "permission denied" error when you provide remote
> > > assistance to client computers from the SBS 2003 SP2 server.
> > >
> > > If I have misunderstood the problem, please don't hesitate to let me know.
> > >
> > > First of all, please check whether you can connect the client computer with
> > > client's IP address instead of the client computer name.
> > >
> > > 310629 Permission Denied Error When You Are Using Offer
> > > Remote Assistance
> > > http://support.microsoft.com/default...b;EN-US;310629
> > >
> > > If the issue persists even when you use the IP address to connect the
> > > client computer, please follow the suggestions below to narrow down the
> > > issue.
> > >
> > > Suggestions #1:
> > > =======================
> > > By default, in the SBS 2003 environment, the SBS Remote Assistance Policy
> > > define the Domain Admins group members can control the client computer via
> > > remote assistance. Please make sure that all client computers have the
> > > applied this GPO and allow the Domain Admins remote control the computer.
> > > To verify that, you can run GPresult /v on the problematic client computer
> > > to show all applied group policy settings. Is the Offer Remote Assistant
> > > setting applied on the client?
> > >
> > > Suggestions #2:
> > > =======================
> > > In the SBS 2003 environment, the SBS Windows Firewall define the firewall
> > > exception on the client computers to allow the remote assistance. Please
> > > make sure on the clients the remote assistance is listed in the Windows
> > > Firewall exceptions list.
> > >
> > > Suggestions #3:
> > > =======================
> > > Moreover, on the problematic clients verify whether the Offer Remote
> > > Assistance Helpers group have the proper permission on the Microsoft help
> > > and support services. To check that:
> > >
> > > 1. On the client, run "dcomcnfg" to open the Component Service MMC.
> > > 2. Locate the Microsoft help and support services in Component
> > > services-->My computer--->DCOM Config
> > > 3. Right click Microsoft help and support
> > > services--->Properties--->Security tab--->Edit button in Lunch and
> > > Activation permissions.
> > > 4. Make sure that the Offer Remote Assistance Helpers group has been
> > > granted the lunch permission (local and remote) and activation permission
> > > (local and remote).
> > > 5. If either of the permission is missing, check how it works if you
> > > manually add it.
> > >
> > >
> > > More information for your information:
> > >
> > > 884910 You cannot offer remote assistance to a user whose computer
> > > is running Windows XP Service Pack 2
> > > http://support.microsoft.com/default...b;EN-US;884910
> > >
> > > Hope it helps. If you have any questions or concerns, please do not
> > > hesitate to let me know.
> > >
> > >
> > >
> > >
> > > Best regards,
> > > Miles Li
> > >
> > > Microsoft Online Partner Support
> > > Microsoft Global Technical Support Center
> > >
> > > Get Secure! - www.microsoft.com/security
> > > ================================================== ===
> > > When responding to posts, please "Reply to Group" via your newsreader so
> > > that others may learn and benefit from your issue.
> > > ================================================== ===
> > > This posting is provided "AS IS" with no warranties, and confers no rights.
> > >
> > >
> > >

Hello,

Thank you very much for sharing your resolution.

I'm glad to hear that things are working correctly for you now. Please do
not hesitate to post in SBS newsgroup if you need any assistance in the
future. Thank you.


Best regards,
Miles Li

Microsoft Online Partner Support
Microsoft Global Technical Support Center

Get Secure! - www.microsoft.com/security
================================================== ===
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
================================================== ===
This posting is provided "AS IS" with no warranties, and confers no rights.