question

JJKoolaide360-2417 avatar image
0 Votes"
JJKoolaide360-2417 asked ·

Why when I disable my remote desktop it will go back to allow?

So, I'm wondering how to completely disable the Remote Access feature from my computer. I keep getting hacked. Every time I go to disable the remote desktop assistance it allows me to uncheck it and then the box remains checked when I pull the system properties window back up after I click on apply and then click OK.
If anybody that is smart with computers can help I would greatly appreciate it. I can do whatever it takes if I'm provided detailed instructions. I'm running on windows 10 pro.

windows-remote-desktop-services
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

GraceHE-MSFT avatar image
0 Votes"
GraceHE-MSFT answered ·

Hi,
Thank you for posting your query. According to your description, the key point to solve this issue is disabling the msra.exe and quickassist.exe which the hackers may use. Here are some steps you can refer to.

In the Group Policy window for those users, on the left-hand side, drill down to User Configuration > Administrative Templates > System. On the right, find the “Run only specified Windows applications” setting and double-click it to open its properties dialog. If you want to block specific applications rather than restricting them, you would open the “Don’t run specified Windows applications” setting instead.
![76609-image.png][1]
In the properties window that opens, click the “Enabled” option and then click the “Show” button.
![76695-image.png][2]
In the “Show Contents” window, click each line in the list and type the name of the excecutable you want users to be able to run (or the name of apps you want to block if that’s what you’re doing instead). When you’re done building your list, click “OK.”
![76640-image.png][3]
You can now exit the Local Group Policy window. To test your changes, sign in with one of the affected user accounts and try to launch an app to which the user should not have access. Instead of launching the app, you should see an error message.
![76669-image.png][4]
![76706-image.png][5]

What's more, it is highly suggested that you should deploy win10 Security Mode Anti-virus.

---If the suggestions above are helpful, please ACCEPT ANSWER. Really appreciate. This will also help others with similar issue to find this post quickly. ---
[1]: /answers/storage/attachments/76609-image.png
[2]: /answers/storage/attachments/76695-image.png
[3]: /answers/storage/attachments/76640-image.png
[4]: /answers/storage/attachments/76669-image.png
[5]: /answers/storage/attachments/76706-image.png




image.png (757.5 KiB)
image.png (435.7 KiB)
image.png (107.9 KiB)
image.png (90.0 KiB)
image.png (325.7 KiB)
·
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

JJKoolaide360-2417 avatar image
0 Votes"
JJKoolaide360-2417 answered ·

Thank you,

I was able to successfully block those applications and now hopefully the cyber stalking will be put to an end. I accidentally locked myself out of the Group Policy Editor at first hahahahah omg. I was testing the "run only specified windows applications" and locked myself out of everything except Microsoft Store because that was what I was trying to test it on. I had no idea I would get locked out of the Group Policy. Took me awhile to look up on my phone on how to get everything back to normal. Anyways, If anybody does do what I did be sure to follow these instructions to get everything back to normal:

Click start button, type run into the search field at the bottom of the popup press enter. In the new window enter %systemroot%\system32\GroupPolicy\User delete registry.pol Delete the files

Do the same in %systemroot%\system32\GroupPolicy\Machine delete registry.pol if you see it, my PC didn't have it.

Reboot your system.

Log in under admin account, create a new user with admin privileges, reboot and log back in using the new admin account.

Click start button, type run into the search field at the bottom of the popup press enter. Type gpedit.msc, press enter.

Go to Local Computer Policy -> User Configuration -> Administrative Templates -> (double click) system -> (look in panel on the right and double click) run only specified windows applications. Click the radio button next to Disabled

·
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.