Disable Windows Remote Assistance Control in Regedit

This guide explains how administrators can disable the remote control capability of Windows Remote Assistance using the Windows Registry Editor (Regedit). By configuring this specific registry setting, administrators can restrict Remote Assistance sessions to view-only mode, preventing technicians or helpers from actively controlling the user’s mouse, keyboard, or desktop interface.

Step-by-Step Guide to Disabling Remote Control

1. Open the Registry Editor

  1. Press Windows Key + R to open the Run dialog box.
  2. Type regedit and press Enter or click OK.
  3. If prompted by User Account Control (UAC), click Yes to grant administrative privileges.

In the Registry Editor, navigate to the following path using the left sidebar:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Remote Assistance

3. Modify the fAllowFullControl Value

  1. In the right-hand pane, look for a DWORD (32-bit) Value named fAllowFullControl.
  2. If the value does not exist:
    • Right-click an empty space in the right pane.
    • Select New > DWORD (32-bit) Value.
    • Name the new value fAllowFullControl.
  3. Double-click fAllowFullControl.
  4. In the Value data field, enter 0.
    • 0: Disables remote control (sessions are restricted to view-only).
    • 1: Enables remote control (helpers can request and take control).
  5. Ensure the Base is set to Hexadecimal, then click OK.

4. Apply the Changes

Close the Registry Editor. For the changes to take full effect across the operating system, restart the computer or restart the Remote Assistance service. Once applied, users offering assistance will only be able to view the screen and cannot take interactive control of the workstation.