Windows Remote Assistance (MSRA.exe) is a legacy feature built into Windows that allows a user to request help from a trusted individual (like a helpdesk technician or a friend). Once a request is accepted, the remote helper can view the user’s screen and optionally take full control of their mouse and keyboard. While useful for ad-hoc IT support, Remote Assistance relies on generating connection files and passwords, making it a frequent target for social engineering attacks (e.g., tech support scams). In a managed enterprise environment where centralized, secure remote management tools (like SCCM, Intune, or dedicated enterprise RDP) are used, the peer-to-peer Remote Assistance feature represents an unnecessary and risky backdoor.
This guide explains how to completely disable Windows Remote Assistance system-wide using the Group Policy Editor in Windows 11, ensuring unsolicited support connections cannot be initiated or received.
Disable Remote Assistance via Group Policy
To enforce a strict block that prevents the OS from generating or accepting Remote Assistance invitations, we must deploy an administrative template. Note that this requires Windows 11 Pro, Enterprise, or Education editions.
- Log into Windows 11 with an Administrator account.
- Press the Windows Key + R to open the Run dialogue box.
- Type
gpedit.mscand press Enter to launch the Local Group Policy Editor. - In the left-hand navigation pane, strictly follow this exact path:
Computer Configuration > Administrative Templates > System > Remote Assistance - In the right-hand pane, locate the policy named Configure Solicited Remote Assistance.
- Double-click the policy to open its configuration window.
- Select the radio button next to Disabled.
- Click Apply, then click OK.
- Repeat the process for the policy named Configure Offer Remote Assistance (set it to Disabled as well).
Verify the Security Lockdown
To enforce the change immediately across the system, open an elevated Command Prompt and execute gpupdate /force.
To verify the restriction is active, press the Windows key, type “sysdm.cpl” and press Enter to open the System Properties dialog. Navigate to the Remote tab. Under the “Remote Assistance” section, the checkbox labeled “Allow Remote Assistance connections to this computer” will be completely unchecked and greyed out, preventing the user from enabling it. Furthermore, if a user attempts to launch the msra.exe executable directly, the application will immediately fail, stating that the feature is blocked by Group Policy. Your endpoint is now secured against legacy peer-to-peer remote support vectors.