![]() I don’t think any third-party solutions can provide a single pane of glass reporting functionality with the MEM admin center. There are some very useful reporting also available with the Remote Help solution from Microsoft. End-User Experience of Remote Help Solution from MEM Intune – Pic Credit to Microsoft Reports Available Remote Help Solution from Microsoft You will need to click on Launch Remote Help link, as you can see in the below screenshot. The following is the admin experience of i nitiating the remote help or remote assistance from devices node similar to TeamViewer’s remote assistance options (I think). The admin can initiate remote assistance from Intune MEM Admin center portal, and the end-user can initiate the request for remote assistance using the security code from the new remote help Windows app.ĭownload the Remote Help Client for Windows 11 or Windows 10 devices from Įnd User Experience of Remote Help Solution from MEM Intune – Pic Credit to Microsoft There are two types of solutions provided by the Remote Help solution. Tier 3 could have the permissions required to elevate using their alternate local administrator credentials on the end user’s device.ģ Tier Helpdesk Support RBAC options with Remote Help – Pic Credit to Microsoft End User Experience of Remote Help Solution from MEM Intune.Tier 2 support can have full control permissions.Tier 1 Support will have View-only permissions.You will have options to create custom RBAC roles for remote help solutions. There are three tiers of permissions that Microsoft designed as out of the box. I like the granularity of the RBAC controls that you will have in place with the new remote help tool in Intune MEM admin center portal. Offer Remote Assistance – Enabled the “new remote assistance session” option in the devices menu.ģ Tier Helpdesk Support RBAC options with Remote Help.View Screen – Allows the helpdesk admin to start a screen sharing session.The helpdesk admin can enter the credentials as well. Elevation – Allows helper to interact with the UAC prompt on end-user’s device.Take Full Control of User’s Device – Allows the helper (admin or hepdesk user) to control the end-user’s device.I think some of these are the minimum permissions required (like “Offer Remote Assistance permission” + one of the other permission) for helpdesk operators to perform remote help. The following list of permissions is mainly required for the admins who will take the remote control of end users’ devices. View Reports – Allows update access to the remote assistance app blades (for both Remote Help and TeamViewer).Update – Allows access to the Monitor and Sessions tab of the remote help blade in MEM Admin center.Read – Allows read only access to the remote assistance app blades (for both Remote Help and TeamViewer).RBAC Permissions for Microsoft Remote Help Solution Pic Credit to Microsoft I think this is not required for all remote help support staff. The first set of permissions are for checking the status of the connector etc. The following is the table that Microsoft shared to give an overview of permissions for each MEM Remote Help offering functionality. Granular option to enter administrative credentials for elivated permissions.The Intune or MEM admin can set permissions in the Microsoft Endpoint Manager admin center to limit the sessions to have: I have shared the design that Microsoft shared to have three tiers of remoter helper operator permissions. You don’t need to go through the complex integration process with the look of the new remote help solution from the MEM admin center. The new Remote Support solution from Microsoft helps IT admins to take the remote control of the Windows 10 or Windows 11 devices that are managed by Intune. Proxy Firewall Network Requirement for Intune Remote Help Setup Integrate Intune Remote Support Solution Remote Help Required for chat services within remote help Used for accessibility features within the app Used for chat services within remote help Might not be available in preview in all markets or for all localizations. ![]() Required for logging in to the application (AAD). Required for the Skype framework used by remote help Primary endpoint used for the remote help application NOTE! The connection used is the Remote Desktop Protocol (RDP). The Remote Help service in place is Remote Assistance Service at. As expected, Remote help communicates over port 443 (HTTPS). Let’s see what are Proxy, Firewall, and Network Requirement for Intune Remote Help Setup. Overview of Remote Help Solution Pic Credit to Microsoft Proxy Firewall Network Requirement for Intune Remote Help Setup
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |