The Allow only Vista or later connections machine setting should be configured correctly. This policy setting enables Remote Assistance invitations to be generated with improved encryption so that only computers running this version (or later versions) of the operating system can connect. This setting does not affect Remote Assistance connections that are initiated by instant messaging contacts or the unsolicited Offer Remote Assistance. If you enable this policy setting, only computers running this version (or later versions) of the operating system can connect to this computer. If you disable this policy setting, computers running this version and a previous version of the operating system can connect to this computer. If you do not configure this setting users can configure the setting in System Properties in the Control Panel. Fix: (1) GPO: Computer Configuration\Administrative Templates\System\Remote Assistance\Allow only Vista or later connections (2) KEY: HKLM\Software\policies\Microsoft\Windows NT\Terminal Services\CreateEncryptedOnlyTickets