Edit

Share via


Use Remote Help with Microsoft Intune

Note

This capability is available as an Intune add-on. For more information, see Use Intune Suite add-on capabilities.

Microsoft Intune Remote Help is a cloud-based remote support solution that allows IT support teams to connect securely to an end-user's device for real-time assistance. It's available as a standalone add-on to Microsoft Intune, or as part of the Intune Suite, enabling organizations to provide remote troubleshooting and guidance with enterprise security controls in place. Remote Help distinguishes between helpers (support personnel) and sharers (end users sharing their screen), both of whom must sign in with corporate Entra ID accounts for each session. This requirement means Remote Help only works within your organization's tenant – helpers can't assist users in another tenant or external organization.

Remote Help capabilities

The Remote Help app supports the following capabilities in general across the supported platforms.

  • Enable Remote Help for your tenant: By default, Remote Help isn't enabled for Intune tenants. If you choose to turn on Remote Help, its use is enabled tenant-wide. Remote Help must be enabled before users can be authenticated through your tenant when using Remote Help.

    A screenshot of the tenant administration screen where you can enable Remote Help.

  • Requires Organization login: To use Remote Help, both the helper and the sharer must sign in with a Microsoft Entra account from your organization. You can't use Remote Help to assist users who aren't members of your organization.

    Screenshot of Remote Help requiring an organizational account.

  • Compliance Warnings: Before a helper connects to a user's device, helpers see a noncompliance warning about that device if it's not compliant with its assigned policies.

  • Role-based access control: Admins can set RBAC rules that determine the scope of a helper's access, such as:

    • The users who can help others and the range of actions they can do while providing help. For example, who can run elevated privileges while helping.
    • The users who can only view a device, and who can request full control of the session while assisting others.
  • Monitor active Remote Help sessions, and view details about past sessions: In the Microsoft Intune admin center, you can view reports that include details about who helped who, on what device, and for how long. You can also find details about active sessions. An administrator can also reference audit log sessions created for Remote Help in Intune under Tenant Administration > Audit Logs.

    For unenrolled devices, auditing the Remote Help sessions is limited.

  • Web app for sharers - In situations where the Sharer needs assistance but is unable to install the native application for macOS or Windows, the Sharer can use the Web App to share their screen to a helper. This web app provides view only capabilities to the helper, allowing them to guide the user through resolving issues.

Platform-specific capabilities

  • Elevation: Allows helpers to enter UAC credentials when prompted on the sharer's device. Enabling elevation also allows the helper to view and control the sharer's device when the sharer grants the helper access.

    Screenshot of the prompt to enable elevation support during a remote help session on Windows.

  • Remote launch: Allows helpers to launch Remote Help on the helper and sharer's device from Intune by sending a notification to the sharer's device.

    A screenshot of the sharer's computer showing the prompt to start a Remote Help session using the Remote Launch feature.

  • Optional support for unenrolled devices: This setting is turned off by default. Enabling this option allows help to be provided to devices that aren't enrolled in Intune. This setting doesn't apply to devices used by helpers.

    A screenshot of the option to enable unenrolled devices

  • Conditional access support: You can use Conditional Access policies to control how helpers and sharers access Remote Help. For example, you can require multifactor authentication (MFA) for helpers or restrict access to specific locations or compliant devices.

  • Chat functionality: Remote Help includes enhanced chat that maintains a continuous thread of all messages. This chat supports special characters and other languages including Chinese and Arabic. For more information on languages supported, see Languages Supported.

  • Web app for sharers - In situations where the Sharer needs assistance but is unable to install the native application for macOS, the Sharer can use the Web App to share their screen to a helper. This web app provides view only capabilities to the helper, allowing them to guide the user through resolving issues.

Demos and Videos

The Remote Help interactive demo walks you through scenarios step-by-step with interactive annotations and navigation controls.

Next Steps