{"id":3144,"date":"2024-08-23T13:32:21","date_gmt":"2024-08-23T17:32:21","guid":{"rendered":"https:\/\/increasec.com\/?p=3144"},"modified":"2026-01-19T09:48:11","modified_gmt":"2026-01-19T14:48:11","slug":"remote-support-tools","status":"publish","type":"post","link":"https:\/\/increasec.com\/?p=3144","title":{"rendered":"Remote support tools RMM"},"content":{"rendered":"\n

Cold\/1Off support: (requires someone on the far end to enter a Session# + password)
TeamViewer was the Go-To tool, but recently they have been putting short time limits on free sessions and their tools is seeing increasing use by bad actors. Our 1to1 replacement is RustDesk<\/strong>; free to use, don’t expect this to be as fast as paid TeamViewer. More than sufficient to setup your unattended support tools.<\/p>\n\n\n\n

Unattended Support tools: (after setup, doesn’t require anyone at far end to remote control)
TeamViewer as mentioned has priced themselves out of contention
n-Able\/n-Central is less expensive and has more functionality
NinjaOne recommended by Lawrence Systems, have not tested myself
RustDesk cheap and reliable, less functionality than more expensive options above. OR selfhost for free if you dare. <\/p>\n\n\n\n

<\/p>\n\n\n\n

When you run commands on workstations thru a remote support tool most of the time they run under the System context so they don’t have a search path to find useful tools like winget. Below are commands with the path included.<\/p>\n\n\n\n

“C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.26.400.0_x64__8weky
b3d8bbwe\\winget.exe” upgrade –all –accept-package-agreements –accept-source-agreements<\/p>\n\n\n\n

“C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.26.400.0_x64__8weky
b3d8bbwe\\winget.exe” upgrade “VLC media player” –accept-package-agreements –accept-source-agreements<\/p>\n\n\n\n

“C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.26.430.0_x64__8wekyb3d8bbwe\\winget.exe” install Tailscale.Tailscale –silent –accept-package-agreements –accept-source-agreements<\/p>\n\n\n\n

powershell
Invoke-WebRequest -Uri https:\/\/packages.wazuh.com\/4.x\/windows\/wazuh-agent-4.8.2-1.msi -OutFile ${env.tmp}\\wazuh-agent; msiexec.exe \/i ${env.tmp}\\wazuh-agent \/q WAZUH_MANAGER=’wazuh-server.yourdomain.local’<\/p>\n\n\n\n

NET START WazuhSvc<\/p>\n\n\n\n

<\/p>\n\n\n\n

netsh advfirewall set allprofiles state off
just for testing of course<\/p>\n\n\n\n

Powershell \/c Test-NetConnection -Computername “whatever” -Port 3389
3389=RDP Remote Desktop<\/p>\n\n\n\n

<\/p>\n\n\n\n

<\/p>\n\n\n\n

M$ OpenSSH Server for Win10+11 (Tested in Win10)<\/p>\n\n\n\n

Start, Settings, System, Optional Features<\/p>\n\n\n\n

Add a Feature (Add an Optional Feature,View Features in Win11)<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Type SSH<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

checkmark next to OpenSSH Server<\/strong>, and click Add<\/p>\n\n\n\n

sip ur coffee, takes about 3min<\/p>\n\n\n\n

the SSH service will be disabled by default<\/p>\n\n\n\n

Right click on the start menu and choose Computer Management. Services and Applications, Services, find OpenSSH SSH Server (ya i didn’t name it), set it to Automatic (Delayed Start), and start it.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

I tested with the OpenSSH Authentication Agent NOT running and was still able to authenticate and start a session. even when using a domain logon.<\/p>\n\n\n\n

The default Windows Firewall rules allow inbound connections to SSH but do NOT allow ping.
I would recommend you only make firewall exceptions for your jump-box and not the entire subnet <\/p>\n\n\n\n

Note you can type powershell and get a powershell prompt, you are not limited to strictly cmd\/dos.<\/p>\n\n\n\n

This is a very Ram efficient method of remote management. Something like nAble takes 65mb<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

<\/p>\n\n\n\n

<\/p>\n\n\n\n

<\/p>\n\n\n\n

<\/p>\n\n\n\n

“C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.26.400.0_x64__8weky
b3d8bbwe\\winget.exe” install -e –id tailscale.tailscale<\/p>\n\n\n\n

<\/p>\n\n\n\n

<\/p>\n\n\n\n

Google Remote Desktop
Con
-can’t remotely run as Administrator, and the screens don’t appear so you can’t advise the user what to do<\/p>\n\n\n\n

<\/p>\n","protected":false},"excerpt":{"rendered":"

Cold\/1Off support: (requires someone on the far end to enter a Session# + password)TeamViewer was the Go-To tool, but recently they have been putting short time limits on free sessions…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-3144","post","type-post","status-publish","format-standard","hentry","category-uncategorised"],"_links":{"self":[{"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/posts\/3144","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/increasec.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3144"}],"version-history":[{"count":25,"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/posts\/3144\/revisions"}],"predecessor-version":[{"id":4001,"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/posts\/3144\/revisions\/4001"}],"wp:attachment":[{"href":"https:\/\/increasec.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3144"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/increasec.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3144"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/increasec.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3144"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}