9.5 Remote Desktop & Assistance
Remote Desktop lets you access your computer from a remote location over a network connection.
*With Remote Desktop:* -The remote host (called the server) is left running in a state ready to accept a connection. -The remote client (running on a different computer) establishes the connection and logs on to the remote host. -The client computer can then run programs, make configuration changes, or access data on the host computer.
In addition to Remote Desktop, you can use the following protocols for remote access administration:
-Telnet opens a plain-text, unsecured, remote console connection. Telnet uses TCP port 23. -Secure Shell (SSH) provides the same capabilities as Telnet but encrypts the data being transferred. SSH uses TCP port 22. These protocols are typically used to manage Linux and Macintosh computer systems. While they can also be configured on Windows, Remote Desktop is the preferred solution.
Keep in mind the following details when working with Remote Desktop:
-The Remote Desktop service is only supported on *Professional, Business, Enterprise, and Ultimate editions* of Windows. -The Remote Desktop client software is available on all editions of Windows. -A default installation does not enable the Remote Desktop feature. Edit the System properties to enable Remote Desktop. -By default, Administrators have the ability to log on remotely. You can also allow other users to connect to the system by making them members of the Remote Desktop Users group. -The user account that is used to authenticate through the Remote Desktop connection must have a password assigned. If one is not set, the connection cannot be established. -Firewalls must be configured to allow Remote Desktop traffic through them. This is done by opening TCP port 3389 (by default). This port is opened automatically on the Remote Desktop host when remote connections are enabled. *As you make the connection, you can configure the connection to redirect devices on the host device to the client device. For example, Remote Desktop can:* -Play sound from the remote computer through the local computer's speakers -Connect a printer on the local computer to the remote computer. When printing from an application on the remote computer, the print job is redirected through the Remote Desktop connection to the local printer. -Map local drives to the remote computer. This allows access to local drives from the remote computer. It also makes it easy to share files between the remote and local computers.
Remote Assistance
RA allows a person needing help with their computer to request help from another user, such as a help desk technician or workstation support professional. The person offering assistance can view the desktop of the requester and, with permission, perform actions remotely. -Remote Assistance uses the Remote Desktop Protocol (RDP) for sending desktop information to a remote computer. -Remote Assistance must be enabled on the target computer. Use the Remote tab in System Properties to enable Remote Assistance and to specify whether the remote control is allowed. -Firewalls must be configured to allow Remote Assistance connections. This is done by opening TCP port 3389 (by default). -A Remote Assistance session is initiated by sending an assistance invitation. The invitation includes information that allows the remote user and computer to make the connection, exchange messages, and take control if necessary. To initiate a remote assistance session, select *Launch Remote Assistance* under System and Security in Control Panel. The requester has three options for sending an invitation: -Save the invitation as a file. If this option is selected, the invitation file must be manually attached to an email message and sent to the person providing assistance. -Use email to send the invitation. If this option is selected, the user's default email program is launched and the invitation automatically attached to a new message. -Use Easy Connect. This allows an invitation to be delivered directly to the person providing assistance through a network connection. However, this option requires that both the requester and the helper have access to Microsoft's global peer-to-peer network. Many (if not most) organizational firewalls block access to this network by default. If this is the case, use one of the above options instead. -By default, the requester must initiate the invitation. However, in a corporate environment Active Directory can be configured to allow the expert to initiate a Remote Assistance connection. -Invitations require a password and have an expiration date. Expired invitations cannot be answered. -With permission, the helper can take control of the user's computer. The user can regain control of the computer at any time by pressing the Esc key, Ctrl + C, or clicking Stop Control. -The helper cannot copy files from a user's computer. The user must explicitly send any files the helper may need.
