Hey guys, I have a question regarding something that our IT department can't seem to figure out and it is driving us nuts.
In our company, we have a server and domain set up that all of our users are attached to via their provided computers. On that domain, we have several group policies set up that are applied to our users. One in particular does not seem to be propagating to all of the computers in our network, which is the OfferRemoteAssist group.
We are a small IT team consisting of three people. The group policy is the same for each of us, yet two of us cannot connect to our users to offer remote assistance while the third one can. Using remote desktop and remote connection manager to access all of our users and servers works just fine, but the actual remote assistance service (so we can remote into our users and work along with them to solve issues) will not work for two of us.
So the first thing I figured was that the two users who cannot use remote assist must have their user accounts missing from a group policy, whether it be a local or a network policy. I did some digging and noticed that the local group policies on the computers of the two users who cannot connect didn't update with the proper network group policies. We have had no issues with any other group policies, but for some reason our OfferRemoteAssist policy will not propagate down to all of our users.
When I looked at the local group policy for OfferRemoteAssist, not everyone in our IT department was included on it, but they are included on the domain side. When I added our names locally on our machines, we can connect to some users remotely but not all. I tested this on two laptops by updating the local OfferRemoteAssist group and remote assistance worked.
So basically, I'm thinking that all of our other users local group policies are not being updated by the domain, telling them that our two IT users do not have access to remote assist, even though it is set manually and locally on the IT computers. Anybody know what could possibly be causing this issue? Maybe I'm not accurate on my assumption here but it looks to me that this particular (and maybe others we are unaware of) group policy isn't propagating to all of our users. I've double checked all of the other remote policies and settings and we are having no issues there, only with the OfferRemoteAssist group that I'm aware of. The IT department sets up all PCs for each user and we always ensure all remote settings are applied both locally and on the domain. I have also checked out each PC in our GPO group and no issues there that I see.
I appreciate any suggestions you guys may have. Thanks!