Windows 10: Is there a way to block non domain users from using Quick Assist?

Is there a way to block non domain users from using Quick Assist?

:)

 

Quick Assist for users in domain

Hey there!

Users are using 3rd Party applications in their systems to remotely access another user for support. I want to limit the users from accessing another user systems and they must use only MS Quick Assist for remote support. Additionally, users in my company domain must be able to support users to users in my company domain only. That means user A to assist user B with only condition that both the users are in my company network or domain only. Anyone outside my company domain or network cannot get or receive quick assist.

Please let me know if anything can be done using server settings or firewall settings.

Thanks in advance.

 

Quick Assist not working

Good diagnostic step.

You've tried disabling 3rd party program startups, but there could be more things starting beyond those listed in the task manager startup list, if that's what you used.

Ideally you would have hands on access to both PCs... but that's not so. All credit to them for creating a new user account etc.

If you wished to disable more startups on the problem account you could use Autoruns (free from MS). But that seems asking a bit much of someone else remotely.

Of course, the problem could have nothing whatsoever to do with startups... you might want to check all services are default, for example, in particular those necessary for this.

Presumably it's not been blocked by the firewall:

Get and Give Remote Assistance with Quick Assist app in Windows 10
- some unfinished discussion as to whether both accounts had to be MS accounts or not.

I found this:

Windows 10 Quick Assist: Helpful Remote Assistance App or Potential Vulnerability? — Steeves and Associates


https://4sysops.com/archives/remote-control-windows-10-with-quick-assist/

This gives useful detail on how it works. For example, it uses port 443, so you need to check that's not blocked.
It also indicates how to block it- so you can check that doesn't apply.

 

Quick Assist

Hi,

Thank you for writing to Microsoft Community Forums.

Please reply to the following questions to get a better understanding of the issue:

• What happens when you search for quick assist in the start menu?
  
• Are you getting any error message while opening Quick Assist?
  
• Which build version of Windows 10 is installed on your computer?
  
• Since when are you facing this issue?
  
• Did you make any changes to the computer recently?
  

However, you can try the troubleshooting steps mentioned below:

Method 1: Re-registering the app

1. Type PowerShell on the search bar.
   
2. Right click on PowerShell and select
   Run as administrator.
   
3. Type the following command and press Enter:
   
   Get-AppxPackage -AllUsers| Foreach {Add-AppxPackage -DisableDevelopmentMode -Register "$($_.InstallLocation)\AppXManifest.xml"}
   
4. Once the process is completed, restart the computer and search for Quick Assist.
   

Method 2: Creating new user account

You can create a new user account and check if you are able to open Quick Assist.
To create a new user account please follow the steps from L: Create a local user
or administrator account in Windows 10.

Hope it helps.

Let us know if you got the help you needed by clicking ‘Yes’ or ‘No’.

Nikhar Khare

Microsoft Community - Moderator