I can offer RA to some machines but not all. Our computers are running Windows 7 Pro 32-Bit on a Windows Server 2008 domain.
I created Remote Assistance GPO to enable the feature needed on network.
User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop - ENABLED
Offer Remote Assistance - ENABLED (Added our group to Helpers list)
Solicited Remote Assistance - DISABLED
Confirmed HKLM>Software>Microsoft>OLE, EnableDCOM = Y
I even installed RA on the domain controller.
I can access the desktop's C:\ from the network so I can access the targeted computer but I get the following error from RA:
I checked the Default Properties on the targeted computer and confirmed "Default Authentication Level - Connect" and "Default Impersonation Level - Identify". Enable Distributed COM on this Computer is checked.
I check EventViewer and get the following error:
Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 3/15/2013 2:32:51 PM
Event ID: 10006
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: ComputerName.doamin
Description:
DCOM got error "2147746132" from the computer 10.x.x.x when attempting to activate the server:
{833E4010-AFF7-4AC3-AAC2-9F24C1457BCE}
Event Xml:
< Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
<EventID Qualifiers="49152">10006</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2013-03-15T19:32:51.000000000Z" />
<EventRecordID>17724</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>PCName.domain</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">2147746132</Data>
<Data Name="param2">10.x.x.x</Data>
<Data Name="param3">{833E4010-AFF7-4AC3-AAC2-9F24C1457BCE}</Data>
</EventData>
< /Event>
I check the EventVwr on Target Computer and I see this error:
The application-specific permission settings do not grant Remote Activation permission for the COM Server application with CLSID {3C3A70A7-A468-49B9-8ADA-28E11FCCAD5D} and APPID {F8FD03A6-DDD9-4C1B-84EE-58159476A0D7} to the user Domain\UserID SID (S-1-5-21-2372432400-2791315748-1353314665-5232) from address 10.x.x.x. This security permission can be modified using the Component Services administrative tool.
I decided to add usernames to the helpers list and the Security Filtering on the GPO is empty as I want it to apply to everything in the OU.
The OU has all the desktop/laptop computer accounts.