Share via


Quick Assist blanks remote screen when UAC prompts for admin password

Question

Tuesday, July 17, 2018 9:52 PM

Using Quick Assist, a remote administrator cannot input credentials since the remote screen is blanked.  How does the administrator elevate while using quick assist? Isn't that what Quick Assist is for?

Thanks in advance!

All replies (7)

Tuesday, July 17, 2018 11:30 PM

Open File Explorer, go to the View tab, and click/tap on Options in the Ribbon bar.
Under the General tab, in Privacy area, click on the Clear button next to Clear File Explorer history.

Open the following locations:

%APPDATA%\Microsoft\Windows\Recent Items

%APPDATA%\Microsoft\Windows\Recent\AutomaticDestinations

%APPDATA%\Microsoft\Windows\Recent\CustomDestinations

Delete all files in the folder locations to clear them completely.

S.Sengupta,Microsoft MVP Windows and Devices for IT, Windows Insider MVP


Wednesday, July 18, 2018 1:40 AM | 1 vote

Set the following policy either locally or via a Domain GPO.

Computer Configuration > Windows Settings > Local Policies > Security Options > User Account Control : Switch to the secure desktop when prompting for elevation.  Check Define this policy setting and select Disabled.

Update your computers with the latest group policy change. In CMD Prompt run gpupdate /force

Have a try.

Regards

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].


Friday, July 20, 2018 8:50 AM

Would you mind letting me know the update of the problem? If you need further assistance, feel free to let me know.

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].


Friday, June 7, 2019 1:14 PM | 1 vote

Hi,

Add the following registry entries:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System]

"EnableSecureUIAPaths"=dword:00000001

"PromptOnSecureDesktop"=dword:00000000

Deploy them to all via GPO and your issue will be resolved.

HTH.


Tuesday, March 17, 2020 6:04 PM

Disabling UAC is not a solution.


Friday, March 20, 2020 12:57 PM

You have a better idea?

Jordan Cobb


Tuesday, April 7, 2020 2:05 PM

In theory, the Policy you're supposed to enable with QuickAssist (or its predecessor, MS Remote Assistance) is--

User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop

This policy will only allow remote elevation for assistance programs run from secure paths. So while part of UAC is disabled, it's only selectively disabled; you have to make the call as to whether that's acceptable.

It worked fine with MSRA (which is still available on W10, but only useful on the LAN with domain members) but has never worked for me on multiple domains with QA. I think QA is broken. Would be interested in knowing if other here have the same experience after enabling this Policy.