help with "offer remote assistance"

[djaap]

Hi,
I'm having a problem offering remote assistance to all windows 7 machines on my network. I have tried offering remote assistance from 3 different OS's (windows 7, windows 2008 r2, and windows 2003 r2)...all of which are unsuccessful. However, I can successfully offer remote assistance to any XP machine in my network. The error that I get varies slightly depending on which OS that I'm offering remote assistance from.....however, the following error always shows up in the windows system event log on the windows 7 PC's that I'm trying to connect to:
The application-specific permission settings do not grant Remote Activation permission for the COM Server application with CLSID
{3C3A70A7-A468-49B9-8ADA-28E11FCCAD5D}
and APPID
{F8FD03A6-DDD9-4C1B-84EE-58159476A0D7}
to the user MYDOMAIN\Administrator SID (S-1-5-21-2839637978-2530025518-2047804967-500) from address 2002:c821:105::c821:105. This security permission can be modified using the Component Services administrative tool.

I'm controlling the remote assistance settings via group policy. All of my windows 7 machines are in the exact same OU as my XP machines.....so i don't thnk it's a gpo conflict.
I've found several ms community articles suggesting to edit settings in dcomcnfig.exe....none of which have not fixed the problem.
I've scowered the web and other threads on this forum, but i can't find anything that fixes this....I would love to fix this because i really don't want to use VNC as the alternative....any help would be tremendously appreciated.

 

[DSummZZZ]

Do you have it blocked in the firewall on those machines?


-Dave Summers-

Even more Fox stuff at:

http://www.davesummers.net/foxprolinks.htm

 

[djaap]

no, it's not being blocked by windows firewall...i added the appropriate firewall exceptions (per

https://support.microsoft.com/kb/301527)

via group policy....and the firewall is not blocking it on the XP machines in the same OU (which have the same policies applied)....just to be sure i've even turned off the firewall on the windows 7 machines and the problem remains

 

[djaap]

found this article

http://social.msdn.microsoft.com/Fo...ivation-permission-for-the-com?forum=tfsadmin

I followed this article and found CSLID 3C3A70A7-A468-49B9-8ADA-28E11FCCAD5D was tied to RASrv...which i found in dcomcnfg.exe as RAServer....the security properties ('launch and activation permissions', 'access permissions', and 'configuration permissions') were all set to "customize". I set them all to "use default". after that i was able to to connect with unsolicited remote assistance.

So my next question is....is there a way to do this via group policy?