Use the following checks to isolate why only some users can sign in to Remote Help, even though licenses and OS versions are the same:
- Verify Remote Help is enabled at tenant level
- In the Intune admin center, go to Tenant administration > Remote Help and confirm that Remote Help is Enabled for the tenant. If licenses were only recently assigned, allow up to a few hours for the service to fully activate.
- Confirm affected users meet Remote Help requirements
- Both helper and sharer must sign in with organizational Microsoft Entra accounts from the same tenant. Remote Help cannot be used across tenants or with personal accounts.
- Ensure affected users are on supported platforms/versions as defined in Plan Remote Help.
- Check role-based access for helpers
- For users acting as helpers, confirm they are assigned an Intune role that includes Remote Help permissions and specifically the Offer remote assistance permission.
- Validate device-side prerequisites and connectivity
For devices where sign-in or session start fails:
- Confirm the device meets the Remote Help requirements and has network access to all required Remote Help endpoints (see Network endpoints for Remote Help in the planning doc).
- On Windows devices, verify:
- The Microsoft Intune Management Service is running. If it is stopped, notifications and remote launch can fail.
- The device is not in Do not disturb mode and that apps are not blocked from using notifications (see Policy CSP – Notifications). If notifications are blocked, the user may appear unable to sign in or complete the session.
- On newly enrolled devices, be aware there can be a delay (up to about an hour on Windows, ~15 minutes on Android) before push notifications and Remote Help session initiation work reliably.
- Check for known issues and retry
- For newly enrolled or recently rebooted devices, wait for the Microsoft Intune Management Service to fully start, or have the user manually open the Remote Help app and sign in again.
- If the issue is intermittent, compare a working user/device against a failing one for:
- Intune enrollment status
- Compliance state
- Network path to Remote Help endpoints
- Review logs for failing users
- On affected Windows devices, collect Remote Help installation logs from
C:\Users\<username>\AppData\Local\Temp:-
Remote_help_*_QuickAssist_Win10_x64.msi.log -
Remote_help_*.log
-
- Check Event Viewer > Application and Services Logs > Microsoft > Windows > RemoteHelp for sign-in or connectivity errors.
- On affected Windows devices, collect Remote Help installation logs from
If only a subset of users is affected, differences are typically in RBAC permissions, tenant account used to sign in, device enrollment/compliance, or network/notification configuration on those specific devices.
References: