Information Technology Reference
In-Depth Information
The following command verifies that a remote computer called
computer1.mycomputer.com
is able to receive connections on TCP port
3389
:
> portqry -n www.mycompany.com -o 3389
Using Group Policy
Tables 9-3 and 9-4 show the settings that control the remote assistance exception within the
Windows Firewall in the domain and standard profiles respectively.
Table 9-3.
Configure Remote Assistance Exception—Domain Profile
Path
Computer Configuration\Administrative Templates\Network\
Network Connections\Windows Firewall\Domain Profile
Policy name
Windows Firewall: Allow remote desktop exception
Enabled
Value
Table 9-4.
Configure Remote Assistance Exception—Standard Profile
Path
Computer Configuration\Administrative Templates\Network\
Network Connections\Windows Firewall\Standard Profile
Policy name
Windows Firewall: Allow remote desktop exception
Enabled
Value
■
Note
You'll use the remote desktop exception in
netsh
and Group Policy to configure both Remote Assis-
tance and Remote Desktop functionality.
How It Works
In Windows Server 2003, the Remote Desktop connection has replaced Terminal Services for
administration in Windows 2000. Remote Desktop allows up to two administrators to run virtual
sessions on a Windows Server 2003 server to perform administrative tasks. Remote Assistance,
by contrast, is a feature in Windows XP and Windows Server 2003 that lets you share control of
your computer with a remote user. Unlike a Terminal Services or Remote Desktop session,
which provides a virtual, unique session, Remote Assistance allows you to simply view a user's
desktop to offer them assistance, or else take control of their desktop. Creating a Remote Assistance
connection requires the permission of the user that is currently logged onto the remote computer.
To enable Remote Assistance connections prior to Service Pack 1, you needed to manually
configure the following program exceptions:
%WINDIR%\PCHealth\HelpCtr\Binaries\Helpsvc.exe
%WINDIR%\PCHealth\HelpCtr\Binaries\Helpctr.exe
%WINDIR%\SYSTEM32\Sessmgr.exe
