Deep within the architecture of Windows 11 is an ancient legacy feature called Remote Assistance. Originally designed in the Windows XP era to allow Microsoft support technicians (or helpful family members) to take physical control of your mouse and keyboard over the internet, it is now primarily an attack vector.
Malicious tech support scammers frequently exploit this exact feature. They trick a user into opening a specific file, which silently triggers the Remote Assistance protocol, bypassing standard firewalls and granting the attacker total, unfettered access to the desktop. If you do not actively use Microsoft’s proprietary remote support tools, leaving this port open is a massive, unnecessary security risk.
To harden your workstation against social engineering and remote takeover attacks, you should permanently sever the Remote Assistance protocol at the system level.
Step 1: Open the Legacy System Properties
Because Remote Assistance is a legacy feature, its primary kill switch is not located in the modern Windows 11 Settings app. You must dive into the old Control Panel interface.
- Press the Windows Key + R on your keyboard to launch the Run dialog box.
- Type
SystemPropertiesAdvancedinto the text box (exactly as written, with no spaces). - Press Enter. Click “Yes” if the User Account Control (UAC) prompts you for administrative permission.
Step 2: Access the Remote Settings Tab
- A small, grey window titled “System Properties” will appear on your screen.
- Look at the top of the window and click the tab labeled Remote (it should be the furthest tab to the right).
Step 3: Uncheck the Remote Assistance Protocol
- In the top half of the window, you will see a section specifically titled “Remote Assistance.”
- There is a checkbox labeled Allow Remote Assistance connections to this computer. By default, Microsoft leaves this checked.
- Click the checkbox to remove the checkmark.
- Look slightly lower in the same window to the “Remote Desktop” section. Ensure the radio button is set to Don’t allow remote connections to this computer (unless you specifically use RDP for work).
Step 4: Save and Apply the Blockade
- Click the Apply button in the bottom right corner of the window.
- Click OK to close the System Properties window entirely.
The Result
The change is instantaneous; no reboot is required. By unchecking that single box, you have instructed the Windows Firewall to permanently close the specific ports (usually TCP 3389) associated with the Remote Assistance protocol. Even if a malicious actor manages to trick you into downloading a compromised .msrc-incident invitation file, the operating system will mathematically refuse to establish the connection, ensuring your desktop remains physically isolated from remote takeover attempts.