Overview
Quick Assist is a useful tool in Windows that allows users to get or give assistance remotely. While this feature can be helpful for IT support and troubleshooting, some organizations may prefer to disable it for security reasons or to prevent unauthorized remote assistance. If you’re managing devices through Microsoft Intune, you can easily disable Quick Assist across all managed devices. Here’s how to do it.
Step-by-Step Guide to Disabling Quick Assist in Intune
1. Sign in to the Intune Portal
First, you need to sign in to the Microsoft Endpoint Manager admin center. You can do this by navigating to the following URL:
Microsoft Endpoint Manager Admin Center
Use your admin credentials to log in.
2. Create a Custom Configuration Profile
Since there isn’t a built-in setting to disable Quick Assist directly, you’ll need to create a custom configuration profile.
a. Navigate to Configuration Profiles
In the left-hand menu, select Devices > Configuration profiles.
b. Create a New Profile
Click on + Create profile.
c. Choose Platform and Profile Type
- Platform: Windows 10 and later
- Profile type: Templates > Custom
Click Create.
3. Configure the Custom OMA-URI Settings
In the custom profile, you need to define the OMA-URI settings to disable Quick Assist.
a. Name and Description
- Name: Disable Quick Assist
- Description: (Optional) A brief description of what this profile does.
Click Next.
b. Configuration Settings
Click on + Add to create a new OMA-URI setting.
- Name: Disable Quick Assist
- Description: Disable the Quick Assist feature
- OMA-URI:
./Device/Vendor/MSFT/Policy/Config/RemoteAssistance/QuickAssistEnabled - Data type: Integer
- Value:
0
This OMA-URI setting will disable the Quick Assist feature by setting its enabled state to 0.
Click Save.
4. Assign the Profile to Devices
After configuring the custom settings, you need to assign the profile to the devices.
a. Assignments
Click on Next to go to the Assignments tab.
b. Select Groups
Choose the groups of devices or users you want to apply this profile to. You can select specific groups or apply it to all devices.
Click Next.
5. Review and Create
Finally, review the settings to ensure everything is configured correctly. If everything looks good, click Create to deploy the profile.
Conclusion
Disabling Quick Assist through Intune involves creating a custom configuration profile and setting the appropriate OMA-URI. This approach provides a flexible way to manage and secure your organization’s devices. By following the steps outlined above, you can ensure that Quick Assist is disabled across all managed devices, enhancing your organization’s security posture.