A.In the Default Domain Policy, set the Remote Assistance - Solicited Remote Assistance policy setting to Disabled.
B.In the Default Domain Policy, set the Remote Assistance - Offer Remote Assistance policy setting to Enabled and add the Help Desk Technicians group to the Helpers list.
C.In each computer's Local Security Policy, grant the Help Desk Technicians group the Allow logon through Terminal Services user right.
D.In the System properties for each computer, select the Allow users to connect remotely to this computer option, and add the Help Desk Technicians group to the list of allowed users.