Disable Unsolicited Remote Assistance with Regedit
This article provides a straightforward guide on how to disable unsolicited Remote Assistance invitations (also known as “Offer Remote Assistance”) in Windows using the Registry Editor (Regedit). By turning off this feature, you prevent network administrators or other users from initiating remote sessions on your computer without an explicit, user-generated request, thereby enhancing your system’s overall security and privacy.
Step-by-Step Instructions
1. Open the Registry Editor
- Press the Windows Key + R to open the Run dialog box.
- Type
regeditand press Enter (or click OK). - If prompted by User Account Control (UAC), click Yes to grant administrative permissions.
2. Navigate to the Policy Key
In the Registry Editor, use the left sidebar to navigate to the following path:
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services
(Note: If the Terminal Services key does not exist
under Windows NT, right-click Windows NT,
select New > Key, and name it
Terminal Services.)
3. Modify or
Create the fAllowUnsolicited Value
- Select the
Terminal Serviceskey in the left pane. - Look for a DWORD value named
fAllowUnsolicitedin the right pane. - If the value does not exist:
- Right-click an empty space in the right pane.
- Select New > DWORD (32-bit) Value.
- Name the new value
fAllowUnsolicited.
4. Set the Value Data to Disabled
- Double-click the
fAllowUnsolicitedvalue. - Set the Value data field to
0. - Ensure the Base is set to Hexadecimal.
- Click OK to save the changes.
5. Verify the System Key (Optional)
To ensure the standard system setting matches the policy, navigate to:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Remote Assistance
- Locate the
fAllowUnsolicitedDWORD value. - Double-click it, set its Value data to
0, and click OK.
6. Apply Changes
Close the Registry Editor and restart your computer (or run
gpupdate /force in an elevated Command Prompt) to ensure
the changes take effect immediately.