Remote Support
Remote support lets a technician see or control a distant device through a network connection. It turns screen sharing, input control, diagnostics, and file or command tools into a support session without requiring the technician to be beside the device.
itIT service management and support | OpenSkills.info
Course pathWalk it in order
Look it upDip in anytime
Go furtherLeaves this page
Intro
Remote Support
Remote support is the practice of diagnosing and fixing a device from another location. A technician and an endpoint communicate through a remote-support service or a direct network path. The endpoint sends screen updates and system information. The technician sends keyboard, pointer, command, or file-transfer actions that the product and the user permit.
That connection shortens travel and lets a service desk work with devices outside an office. It also creates a privileged path into the endpoint. A sound remote-support process therefore treats identity, consent, authorization, session evidence, and disconnection as parts of the technical design.
The session architecture
Most remote-support arrangements contain four roles:
- The technician console starts or accepts work and displays the remote endpoint.
- The endpoint component captures display changes, receives allowed input, and exposes approved support functions.
- A broker or gateway authenticates participants, matches them to a session, and often helps devices behind firewalls find each other.
- The support record connects the session to a ticket, device, technician, start and end time, and relevant audit events.
Some products use a direct connection after discovery. Others relay session traffic through vendor or organization infrastructure. Microsoft Quick Assist, for example, obtains a time-limited session code from a remote assistance service. The user enters that code and separately approves screen sharing and control.
Remote Desktop Protocol, or RDP, shows the data path inside one remote-display protocol. Presentation data travels toward the viewer, while keyboard and mouse input travel toward the remote system. Separate virtual channels can carry device and session data. VNC-family tools use the Remote Framebuffer protocol for a similar screen-and-input relationship across several operating systems.
The protocol is not the whole support system. A remote-support product adds identity, device enrollment, session brokering, technician roles, user prompts, logging, integrations, and sometimes background management.
Continue the course
This section is part of the paid course.
See pricing to subscribe, or log in if you already have access.
Where this skill leads
Relevant careers
See how this topic contributes to broader role-level skill maps.
Sources
- https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53r5.pdf
Supports
- Nonlocal maintenance should be approved, monitored, strongly authenticated, recorded, and terminated when complete
- Remote maintenance audit events should be logged and reviewed
- Strong authentication includes replay-resistant multifactor authentication
- https://csrc.nist.gov/pubs/sp/800/46/r2/final
Supports
- Remote-access security covers client devices, remote-access technologies, expected threats, and policy
- Organizations should secure all components of enterprise remote-access arrangements
- https://www.cisa.gov/resources-tools/resources/guide-securing-remote-access-software
Supports
- Remote-access software has legitimate support and administration uses but is increasingly co-opted by threat actors
- The joint guide was published June 6, 2023
- Approved-tool controls, monitoring, hardening, and logging reduce remote-access software risk
- https://www.cisa.gov/sites/default/files/2023-06/guide_to_securing_remote_access_software.pdf
Supports
- RMM software can monitor and operate many devices with heightened permissions
- Legitimate signed remote-access software can blend into an environment and evade normal suspicion
- Remote-access software can provide persistence, file movement, and broad control useful to attackers
- https://www.cisa.gov/sites/default/files/2023-06/Guide%20to%20Securing%20Remote%20Access%20Software_clean%20Final_508c.pdf
Supports
- Customers should require effective monitoring and logging of provider-managed systems
- MSP accounts should be monitored and audited
- Direct access to alter or delete log servers should remain outside RMM tool reach
- https://learn.microsoft.com/en-us/windows/client-management/client-tools/quick-assist
Supports
- Quick Assist uses a helper, sharer, Remote Assistance Service, time-limited code, and separate screen-sharing and control approval
- Quick Assist communicates through HTTPS and uses RDP with TLS for the session
- Users should not accept unsolicited remote-support connections and should disconnect suspected malicious sessions
- https://learn.microsoft.com/en-us/troubleshoot/windows-server/remote/understanding-remote-desktop-protocol
Supports
- RDP carries presentation, keyboard, mouse, and device data over virtual channels
- RDP data is encrypted, wrapped, framed, and transported over TCP/IP
- RDP was implemented in Windows NT Terminal Server as an extensible remote-display protocol
- https://learn.microsoft.com/en-us/windows-server/remote/remote-desktop-services/remotepc/remote-pc-connections-faq
Supports
- A remote PC must be powered, awake, reachable, and configured for Remote Desktop
- DNS, firewall rules, and Network Level Authentication affect RDP connectivity
- https://support.apple.com/guide/mac-help/turn-screen-sharing-on-or-off-mh11848/mac
Supports
- macOS Screen Sharing allows approved users to view and control a Mac over a network
- Screen Sharing can restrict users and can allow VNC viewers with a password
- Apple distinguishes Screen Sharing from the broader Apple Remote Desktop management product
- https://support.apple.com/guide/remote-desktop/choose-how-to-control-and-observe-apd4f46319e/mac
Supports
- Observation and control are distinct modes
- Remote Desktop can require the endpoint user to approve observation or control
- A managed Mac can share the current display or expose a separate authenticated user's display
- https://support.apple.com/es-es/guide/remote-desktop/apd2450a787/mac
Supports
- Remote Desktop can control or observe a client and adjust image quality
- Multi-display selection and clipboard sharing are separate session capabilities
- https://support.google.com/chrome/answer/1649523
Supports
- Chrome Remote Desktop provides persistent remote access and code-based remote support
- Internet connectivity is required and access can be removed from an endpoint
- https://www.splashtop.com/api/assets/7nPcgC61ZePQ9fkKJa1Wug/Splashtop-SOS-Product-Guide.pdf
Supports
- Splashtop SOS is an attended on-demand remote-support product
- A user runs an SOS application and supplies a session code to a technician
- https://www.beyondtrust.com/products/remote-support
Supports
- BeyondTrust Remote Support provides attended and unattended support across endpoint types
- The product includes session auditing, technician oversight, permissions, and ITSM or SIEM integration
- https://support.anydesk.com/access-and-control
Supports
- AnyDesk separates interactive acceptance from configured unattended access
- Unattended Access permits control when nobody is present to accept the connection
- https://www.teamviewer.com/en/products/remote/
Supports
- TeamViewer Remote covers attended support and unattended access across managed devices
- Its support workflow includes device connections, remote control, and session management
- https://screenconnect.connectwise.com/remote-support
Supports
- ScreenConnect Remote Support provides technician-led sessions, unattended access, and support-tool integration
- https://www.splashtop.com/products/remote-support
Supports
- Splashtop packages attended SOS and unattended endpoint support for IT and help desks
- Licensing is based on concurrent technicians
- https://www.logmein.com/products/rescue
Supports
- Rescue targets enterprise remote IT support and on-demand technician sessions
- https://www.zoho.com/assist/remote-it-support.html
Supports
- Zoho Assist separates on-demand remote support from unattended access and supplies service-desk session features
- https://learn.microsoft.com/en-us/intune/remote-help/plan
Supports
- Intune Remote Help applies role-based permissions and device or user scope to help-desk activity
- Supported modes include viewing, full control, elevation, and selected unattended scenarios
- https://www.realvnc.com/en/connect/
Supports
- RealVNC Connect provides remote access and support across desktop platforms
- https://github.com/sindresorhus/awesome
Supports
- Awesome Selfhosted is the indexed curated list used to discover self-hosted remote-access projects
- https://awesome-selfhosted.net/tags/remote-access.html
Supports
- Apache Guacamole, MeshCentral, and RustDesk are curated remote-access projects
- https://github.com/awesome-foss/awesome-sysadmin#remote-desktop-clients
Supports
- Remmina, TigerVNC, and X2Go are curated remote-desktop clients or systems
- https://guacamole.apache.org/doc/gug/introduction.html
Supports
- Guacamole is a browser-accessible gateway supporting RDP, VNC, and SSH
- https://ylianst.github.io/MeshCentral/
Supports
- MeshCentral provides web-based device groups, remote desktop, terminal, and file management for enrolled devices
- https://rustdesk.com/docs/en/
Supports
- RustDesk supports remote control and self-hosted rendezvous and relay infrastructure
- https://remmina.org/remmina-docs/
Supports
- Remmina manages connection profiles for remote-desktop protocols on Linux and Unix systems
- https://tigervnc.org/doc/
Supports
- TigerVNC supplies VNC viewer and server components using the Remote Framebuffer protocol
- https://wiki.x2go.org/doku.php
Supports
- X2Go provides remote Linux desktop sessions using NX technology
- https://www.darpa.mil/about/innovation-timeline/mother-of-all-demos
Supports
- On December 9, 1968, Engelbart demonstrated NLS with remote team participation and interactive display control
- https://en.wikipedia.org/wiki/PcAnywhere
Supports
- Dynamic Microprocessor Associates released the first pcAnywhere version for DOS in 1986
- https://news.microsoft.com/source/1998/06/16/microsoft-releases-windows-nt-server-4-0-terminal-server-edition/
Supports
- Windows NT Server 4.0 Terminal Server Edition was released to manufacturing June 16, 1998
- https://help.realvnc.com/hc/article_attachments/6864678826397/tr.98.1.pdf
Supports
- VNC and its Remote Framebuffer protocol were publicly documented in 1998
- VNC separated a remote display server from viewers across platforms
- https://news.microsoft.com/source/2001/06/04/windows-xp-ushers-in-new-era-of-communications/
Supports
- Windows XP integrated a Remote Assistance feature for users to obtain online help in 2001
- https://www.logmein.com/about-us
Supports
- The company was founded as 3am Labs in 2003 around remote access
- LogMeIn Rescue launched in 2006 as a remote support product
- https://www.teamviewer.com/en/global/company/about-teamviewer/
Supports
- TeamViewer began in 2005 with software for connecting to computers from another location
- https://chrome.googleblog.com/2012/10/controlling-your-computer-from-afar.html
Supports
- Chrome Remote Desktop entered beta in 2011 and added persistent remote access by 2012
- https://blogs.windows.com/windowsexperience/2016/08/02/how-to-get-the-windows-10-anniversary-update/
Supports
- Windows 10 Anniversary Update version 1607 began rolling out August 2, 2016
- https://techcommunity.microsoft.com/blog/askperf/windows-vista--remote-assistance/372388/
Supports
- Windows XP introduced Remote Assistance as an internet help feature
