Windows 10: How we block ''Quick Assist'' application on our domain computers of our company

We want to out users from threads can be come from different organizations. For this reason we want to block using ''Quick Assist'' application on our domain computers. We tried some ways that we found in internet but they did not solve our problem

:)

 

Quick Assist for users in domain

Hey there!

Users are using 3rd Party applications in their systems to remotely access another user for support. I want to limit the users from accessing another user systems and they must use only MS Quick Assist for remote support. Additionally, users in my company domain must be able to support users to users in my company domain only. That means user A to assist user B with only condition that both the users are in my company network or domain only. Anyone outside my company domain or network cannot get or receive quick assist.

Please let me know if anything can be done using server settings or firewall settings.

Thanks in advance.

 

Is there a way to block non domain users from using Quick Assist?

Is there a way to block non domain users from using Quick Assist?

 

Quick Assist not working

Good diagnostic step.

You've tried disabling 3rd party program startups, but there could be more things starting beyond those listed in the task manager startup list, if that's what you used.

Ideally you would have hands on access to both PCs... but that's not so. All credit to them for creating a new user account etc.

If you wished to disable more startups on the problem account you could use Autoruns (free from MS). But that seems asking a bit much of someone else remotely.

Of course, the problem could have nothing whatsoever to do with startups... you might want to check all services are default, for example, in particular those necessary for this.

Presumably it's not been blocked by the firewall:

Get and Give Remote Assistance with Quick Assist app in Windows 10
- some unfinished discussion as to whether both accounts had to be MS accounts or not.

I found this:

Windows 10 Quick Assist: Helpful Remote Assistance App or Potential Vulnerability? — Steeves and Associates


https://4sysops.com/archives/remote-control-windows-10-with-quick-assist/

This gives useful detail on how it works. For example, it uses port 443, so you need to check that's not blocked.
It also indicates how to block it- so you can check that doesn't apply.