There was a time (Windows 7 and earlier versions) when we could support our 1000+ remote users scattered across North America effectively.  Working with the remote user's Task Manager, installing/uninstalling software, editing the registry, etc. 

That seems to have come to a complete halt with the changes to Window 8.1.  Regardless of UAC settings, we cannot do our jobs, whether it's through Lync/Skype Presentation, WebEx, or nearly any other remote sharing software.  Normal workaround is to RDP to the user's computer, using our administrator logons.  However, with 1000+ users remote to our network, RDP ceases to be an option. 

I am curious to know what the "Microsoft Line Of Thinking" is on remotely supporting Windows going forward.  This is a serious issue and I have yet to successfully search up a solution.

Getting ready to use the "not recommended" registry hack to completely disable UAC and just deal with the perceived consequences, as nothing else seems to work.

Thanks,
Jeremy

Am a bit confuse on what exactly you are experiencing.

You can still use remote assistance.

Using Skype for business work great just need on the local computer to do some runas when starting certain things.

You might want to be a bit less aggressive and just give a example of what you can`t do so we can help you.

Plenty of tool like BOMGAR that give you all the tools you need to support users (especially if you have a huge fleet)

Ps: Doing a remote desktop to help some one was never a good feature as you lock the user out.

Apologies, wrote this one up right after another frustrating remote session, where I ultimately had to use RDP to complete the tasks.  I agree, RDP is the least happy method, as the user is booted and can't see what went on. 

As for what we're experiencing, it's the inability to affect Elevated Apps on the target/shared machine.  Often, when we're clearing malware, or even just "tuning up" Windows, we get blocked by UAC.  Can't use Task Manager, Event Viewer, MSConfig, install or uninstall most apps.  All the things we really need to do.

Windows 7 used to let us turn down "Useless" Account Control (my name for it), and I've even seen a few recent 7 systems that STILL blocked Elevated Apps on Never Notify.  Most users aren't happy having to be "talked through" the steps we can do in much less time, were we permitted to do so.

I'm vaguely familar with BOMGAR, but upper management would have to make those decisions.  We're left finding "workarounds" with the tools we have. 

For your issue why not start the application using Run as administrator.

This will allow the application to run with the credential provided.

For the event viewer just type event and when you see the icon appear hold shift and right click and select run as administrator.

You can do pretty much all of the application like this.

For msconfig you could simple run a CMD using run as administrator and start it in that window.

I've already tried that, but pulled up a test 8.1 Enterprise computer to try again.  Still nothing.  I can Run As Admin, Run As Another User (log in with my admin account, or even the local user account), still blocked.

Do you have any more details on how you are able to do this?  These are domain-joined computers, I am a domain admin (when I use my admin account). 

Thanks,
Jeremy

Hi,

According to your description, you were suffering Remote assistance problem after upgrade system to Windows 8.1, isn't it?

Please check following policy settings:

User Account Control: Switch to the secure desktop when prompting for elevation

Switch to disable

User Account Control: Behavior of the elevation prompt for standard users

Switch to Elevate without prompting

After that, run gpupdate /force command for test.

Well if you log in on the machine with a admin account and you don't have access to the things you need. You might have configure some sort of GPO to block these things and and was applied to everyone.

You need to make sure everything is apply to the right users. Also it would help if you could show screenshot of the actual error message you are getting when running the event viewer as admin.

Hi, Fredrick.  There is no error message, it's the behavior of "elevated apps" basically freezing your session until the remote user closes the "offending" window, or clicks off of it.  I've found that even running apps As Another (admin) user opens them, but still blocks remote use of said apps.

Going to look into Roger's suggestions.

Thanks,

yeah you should have said that right form the start about the screen freezing it`s the secure desktop. 

Just need to make a GPO that disable it and you will be able to see the elevated promp whit out any issue.

Apologies, Fred.  Until partway through this thread, I wasn't even aware of the term "Secure Desktop".  Learning as I go.  :)

Thanks,

Jeremy