Quick Assistant for internal domain users only.

Question

I want to limit the users from accessing another user systems and they must use only MS Quick Assist for remote support. Additionally, users in my company domain must be able to support users to users in my company domain only. That means user A to assist user B with only condition that both the users are in my company network or domain only. Anyone outside my company domain or network cannot get or receive quick assist.

Please let me know if anything can be done using server settings or firewall settings.

Answer 1

Hello,

Quick Assist communicates over port 443 (https) and connects to the Remote Assistance Service at https://remoteassistance.support.services.microsoft.com by using the Remote Desktop Protocol (RDP). Use Quick Assist to help users - Windows Client Management | Microsoft Learn

We can find and modify the group policy named "Allow log on through Remote Desktop Services" from Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies\User Rights Assignment in your Active Directory domain to include only the security group(s) of users authorized to provide remote assistance.

Or create inbound and outbound firewall rule on all domain computers to allow Quick Assist traffic (TCP port 443) only from the internal network or specific IP ranges corresponding to your company's network.

---

If the Answer is helpful, please click Accept Answer and upvote it.