Remote Desktop

A user says "can you just take a look". Three different technologies sit behind that sentence and they behave differently enough that picking the wrong one is visible to the person on the other end.

Remote Desktop (RDP)

Microsoft's protocol, launched from mstsc.exe. It opens a session on the remote machine and, on a workstation, throws the signed-in user out to the lock screen.

Remote assistance and shadowing

Quick Assist on modern Windows, Remote Assistance (msra.exe) before it, the Remote Control feature in Configuration Manager (SCCM), Remote Help in Intune. These join the session the user is already sitting in and you both watch the same screen.

Third-party remote tools

TeamViewer, ScreenConnect (formerly ConnectWise Control), AnyDesk, Splashtop, LogMeIn Rescue. Agents on the endpoint that broker a connection through the vendor, so a managed service provider can reach a machine wherever it is, without needing a route into the company network first.

Splashtop is a trademark of Splashtop Inc. ServiceDesk Simulator is not affiliated with, endorsed by, or sponsored by them.

This is the part that gets people suspended. You are about to look at somebody's open email and their personal browser tabs, on a machine you were invited onto for one printer fault.

Get that yes somewhere that leaves a record. A line in the ticket or a message in the chat tool is enough: a verbal yes on a call you did not note stops existing the moment anyone questions the session.

Then narrate the cursor. "I am taking the mouse now", and later "that is yours again, try it". Users hate the moment it moves on its own with no warning.

Unattended access is a different decision. Connecting to a machine with nobody in front of it is sometimes allowed and sometimes forbidden, and the answer lives in your organization's policy, so read it before you connect. Where it is allowed, note in the ticket that the machine was unattended and why you went in.

The second the screen paints you may be looking at an open mailbox, a payroll spreadsheet, a letter from HR, a medical appointment in a calendar, a password manager somebody left unlocked, and a browser with forty tabs of their private life. You were sent to fix a printer, and all of it came with the screen.

In a hospital or a clinic, say it out loud before you connect. "Please close any patient records or anything with personal information on it." PII is personally identifiable information, meaning anything that identifies one particular person: a full name with a date of birth, a social security or national insurance number, a home address, an account or medical record number. PHI, protected health information, is any of that tied to somebody's care, diagnosis, treatment or the payment for it, and it is the category healthcare regulates. You can fix the fault without reading any of it, and opening a record you had no reason to open is a disciplinary matter in most hospitals and can be a reportable breach even when it happened by accident. Closing it first protects the patient, and it protects you. The same sentence travels to a school, where student records have their own protection (FERPA, in the United States), and to a bank or a law firm, with a different name on the data each time.

Remote control is the most invasive tool on the desk, it is often the slow one, and some of the time it cannot reach the machine at all. Reaching for it first is a habit worth breaking early.

The tool lives in the Tools menu as Remote Desktop. It opens on a search box headed Select a computer to connect, reading Search by asset tag, hostname, or owner, over an empty list that says Type to find a computer until you do. Type any of the three, pick the row, press Connect.

Read the requester off the ticket and type that name into the search box. Taking the name off the ticket every time is how you avoid spending ten minutes on the wrong PC.

Then a credential prompt appears over the dimmed picker: Enter your admin credentials for the remote computer. Those are your own admin credentials. Sign in as the person whose ticket you are working and the app tells you so: Wrong credentials. Sign in with your own IT admin account, not the user's.

The prompt carries a Hint toggle that shows the username and password to type. On a real desk that username is a dedicated administrative login, the adm- account Directory had you run the console under (adm-jsmith), and every action in the session is attributed to it. The sim fills the Hint with your own name to keep the lab moving, but the account it stands in for is that separate admin login.

IT technicians are issued their own administrator credentials, separate from the account they sign in with every day. Those credentials carry elevated access on the machine: installing software, changing system settings, and the rest of the work that needs more than a standard account. When a machine asks for approval to do something privileged, that login is what you type. It is issued to you and it identifies you, so you keep it to yourself and type it only into a prompt you opened yourself.

What you land on is a full desktop running Workstation OS 11 Pro. It behaves like a real one: a taskbar with a clock, a start menu, a search box, desktop icons, windows that open and close. System files sit under the usual root.

C:\WorkstationOS\System32

The clock in the taskbar shows the time on the machine you are connected to, and it comes from that machine's time zone setting, which lives in Settings under Time & Language. Time zone and region are separate settings in Windows and the clock follows the time zone. When it disagrees with the time where the user actually sits, the time zone is set wrong, and users never think to mention it.

Try to connect to a machine with no power and the picker tells you so: A machine that shows no signs of power cannot be repaired remotely. The next move is a phone call or a walk over.

Every program on this desktop stands in for something you will open in your first week on a real desk. Learn the pairing here and you will recognize the real tool when you meet it.

Eight of them are icons on the desktop itself: File Explorer, Mail, VPN Client, Chat, System Update, Trash, Settings and Web Browser. The rest are behind the Start button and the taskbar search, which is where Task Manager, Event Viewer, Control Panel and Terminal live. Two of them live inside another program: Disk Cleanup is a control in Settings, and Software Repair is the repair action on a program row in Control Panel.

Elevation is modeled in one place, the Terminal. It opens unelevated and refuses an admin-only command until you elevate it from its own bar, which raises a User Account Control window asking Do you want to allow this app to make changes to your device? It wants credentials, the same way a real prompt does on a machine where the user holds a standard account.