Quick Assist!
Posted by LiveWoodpecker9296@reddit | sysadmin | View on Reddit | 10 comments
What's going on with Microsoft's Quick Support? Does anyone know anything...?
What alternatives do we have?
Posted by LiveWoodpecker9296@reddit | sysadmin | View on Reddit | 10 comments
What's going on with Microsoft's Quick Support? Does anyone know anything...?
What alternatives do we have?
mixduptransistor@reddit
Well, what are you talking about? What do you mean what is going on with it?
But, if I were you I'd block Quick Assist. It's very commonly abused by social engineering campaigns for attackers to gain access to end user devices. We had more than one instance of someone impersonating our helpdesk, calling a user, and starting a Quick Assist session to then install some malware. This is a big thing with ransomware gangs right now
lordmycal@reddit
the CIS benchmarks recommend you block Quick Assist. It's a handy tool if you don't have remote tools in the budget, but there's no way to lock it down so that only designated staff can offer support. That means if it's not blocked, your staff can use it to remotely connect to systems, but so can bad guys with social engineering scams.
The best approach is a paid offering with tighter controls and then block all other remote tools.
ImmmaLetUFinish@reddit
Sounds like a training issue not an app issue.
mixduptransistor@reddit
it is both, and we have handled it both ways
We've sent out communications to the company, but not everyone reads every email. you can force them to take training but not everyone pays attention
If you're relying only on behavioral changes you're going to get breached. we did all of the above AND we also blocked Quick Assist (which, isn't the ONLY method they're using, they are also using teams screen sharing sometimes)
Greedy_Chocolate_681@reddit
Remote help being added to E3 isn't enough for you people? I mean Microsoft is basically giving it away at this point.
lordmycal@reddit
1) This is a new thing and people may not know about it.
2) Microsoft says this change will roll out in Q3 (and it's Q2 right now), so most people probably don't have it yet.
Source: https://techcommunity.microsoft.com/blog/microsoftintuneblog/microsoft-365-adds-advanced-microsoft-intune-solutions-at-scale/4474272
LiveWoodpecker9296@reddit (OP)
I apologize! It turns out that users were trying to connect for quick support very early this morning, but it wasn't working. I just updated Windows and it "magically" fixed it... I'm sorry for the inconvenience, thanks for replying, and by the way, what other free remote support options do we have in Windows like AnyDesk or TeamViewer? Sorry
LiveWoodpecker9296@reddit (OP)
I apologize! It turns out that users were trying to connect for quick support very early this morning, but it wasn't working. I just updated Windows and it "magically" fixed it... I'm sorry for the inconvenience, thanks for replying, and by the way, what other free remote support options do we have in Windows like AnyDesk or TeamViewer?
LiveWoodpecker9296@reddit (OP)
I apologize! It turns out that users were trying to connect for quick support very early this morning, but it wasn't working. I just updated Windows and it "magically" fixed it... I'm sorry for the inconvenience, thanks for replying, and by the way, what other free remote support options do we have in Windows like AnyDesk or TeamViewer?
Jeff-IT@reddit
Some context would be nice