Disable Unsolicited Remote Assistance via Regedit

Windows Remote Assistance allows support personnel to view or control an active user session, either by invitation or through unprompted connection offers. Disabling the unsolicited offer feature enhances endpoint security by preventing support technicians or potential attackers on the local network from initiating unrequested connection sessions. This guide outlines the exact registry modification required for system administrators to disable the unsolicited Remote Assistance feature in Windows using the Registry Editor.

Step 1: Open the Registry Editor

  1. Press Windows Key + R to open the Run dialog.
  2. Type regedit and press Enter.
  3. If prompted by User Account Control (UAC), click Yes to grant administrative privileges.

Step 2: Navigate to the Terminal Services Policy Key

In the Registry Editor address bar, navigate to the following path:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services

Note: If the Terminal Services subkey does not exist under Windows NT, right-click the Windows NT key, select New > Key, and name it Terminal Services.

Step 3: Modify or Create the fAllowUnsolicited Value

  1. With the Terminal Services key selected, look for a DWORD (32-bit) Value named fAllowUnsolicited in the right-hand pane.
  2. If it does not exist, right-click any empty space in the right pane, select New > DWORD (32-bit) Value, and name it fAllowUnsolicited.
  3. Double-click fAllowUnsolicited to edit its properties.
  4. Set the Value data field to 0.
  5. Set the Base to Hexadecimal (or Decimal, as both represent 0 the same way).
  6. Click OK to save the changes.

Step 4: Verify the System-Level Setting (Optional)

To ensure the feature is fully blocked at the operating system control level, check the following path as well:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Remote Assistance

  1. Locate the fAllowUnsolicited value in the right pane.
  2. Double-click it and ensure the Value data is set to 0.
  3. Click OK.

Step 5: Apply the Changes

Close the Registry Editor. For the changes to take effect immediately across all system services, restart the computer or open Command Prompt as an administrator and run:

gpupdate /force

Once applied, the system will reject any unsolicited connection offers, while still allowing user-initiated support invitations if standard Remote Assistance remains enabled.