{ "api_version": "1", "kind": "dse_post", "self": "https://update.dsesecurity.com/api/v1/posts/dse-20260909-201-target-the-correct-avd-user-when-starting-remote-help/", "item": { "id": "https://update.dsesecurity.com/updates/dse-20260909-201-target-the-correct-avd-user-when-starting-remote-help/", "slug": "dse-20260909-201-target-the-correct-avd-user-when-starting-remote-help", "url": "https://update.dsesecurity.com/updates/dse-20260909-201-target-the-correct-avd-user-when-starting-remote-help/", "alternate_urls": { "markdown": "https://update.dsesecurity.com/updates/dse-20260909-201-target-the-correct-avd-user-when-starting-remote-help.md", "json": "https://update.dsesecurity.com/api/v1/posts/dse-20260909-201-target-the-correct-avd-user-when-starting-remote-help/" }, "title": "Target the correct AVD user when starting Remote Help", "summary": "How should a helper reach one Azure Virtual Desktop user instead of broadcasting a request to a shared host?", "format": { "slug": "guide", "name": "Guide" }, "priority": { "slug": "info", "name": "Information" }, "featured": false, "image": { "theme": "continuity-recovery", "label": "Continuity & recovery", "alt": "Paired infrastructure paths converging on a stable recovered service.", "card_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-card.webp?v=1.8.20", "hero_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-hero.webp?v=1.8.20", "social_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20", "width": 2400, "height": 1350 }, "topics": [ { "slug": "business-continuity", "name": "Business Continuity", "url": "https://update.dsesecurity.com/topic/business-continuity/" }, { "slug": "it", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" } ], "author": { "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team", "type": "Organization" }, "publisher": { "name": "Detection Systems & Engineering", "url": "https://dsesecurity.com/" }, "published_at": "2026-09-10T00:28:35+00:00", "modified_at": "2026-09-10T01:20:45+00:00", "reviewed_on": "2026-09-09", "reading_minutes": 2, "word_count": 242, "potentially_affected": "Use this procedure when the person needing help is inside an AVD desktop or RemoteApp session. Confirm which session and published resource the user is actually using before choosing how to start assistance.", "dse_recommendation": "Make user-session identification part of the support handoff.", "primary_source": { "name": "Using Remote Help on Windows to Assist Authenticated Users - Microsoft Intune | Microsoft Learn", "url": "https://learn.microsoft.com/en-us/intune/remote-help/start-session", "published_on": null, "authority": "Microsoft Learn" }, "publishing_principles": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usage_info": "https://update.dsesecurity.com/usage/", "copyright_notice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "content_html": "

Source facts

\n

In Azure Virtual Desktop desktop sessions, an Intune-initiated Remote Help request is broadcast to all active users on the host. RemoteApp sessions cannot be directly targeted from the Intune admin center. Microsoft recommends the security-code method for both cases to reach the correct user session. Within a RemoteApp session, help is limited to the published app rather than the full desktop. The restart option is unavailable when remotely helping AVD. Microsoft Learn.

\n

Applicability

\n

Use this procedure when the person needing help is inside an AVD desktop or RemoteApp session. Confirm which session and published resource the user is actually using before choosing how to start assistance.

\n

DSE recommendation

\n

Make user-session identification part of the support handoff. Exchange the code through the approved contact channel and ask the user to open Remote Help inside the affected session. Do not treat the shared host’s device record as sufficient identification of the person needing support. Keep the expected view limited to the desktop or app appropriate to that session.

\n

Verification

\n

During a controlled support test, confirm that the intended user enters the code and that the helper sees the expected session. For RemoteApp, verify the published application’s scope rather than expecting unrelated desktop access. Document the session identity without capturing unnecessary application content. If the wrong user or resource appears, end the connection and correct the targeting before continuing assistance.

\n

Official references

\n

Microsoft Learn: Using Remote Help on Windows to Assist Authenticated Users.

", "content_text": "Source facts\nIn Azure Virtual Desktop desktop sessions, an Intune-initiated Remote Help request is broadcast to all active users on the host. RemoteApp sessions cannot be directly targeted from the Intune admin center. Microsoft recommends the security-code method for both cases to reach the correct user session. Within a RemoteApp session, help is limited to the published app rather than the full desktop. The restart option is unavailable when remotely helping AVD. Microsoft Learn.\nApplicability\nUse this procedure when the person needing help is inside an AVD desktop or RemoteApp session. Confirm which session and published resource the user is actually using before choosing how to start assistance.\nDSE recommendation\nMake user-session identification part of the support handoff. Exchange the code through the approved contact channel and ask the user to open Remote Help inside the affected session. Do not treat the shared host’s device record as sufficient identification of the person needing support. Keep the expected view limited to the desktop or app appropriate to that session.\nVerification\nDuring a controlled support test, confirm that the intended user enters the code and that the helper sees the expected session. For RemoteApp, verify the published application’s scope rather than expecting unrelated desktop access. Document the session identity without capturing unnecessary application content. If the wrong user or resource appears, end the connection and correct the targeting before continuing assistance.\nOfficial references\nMicrosoft Learn: Using Remote Help on Windows to Assist Authenticated Users.", "content_markdown": "## Source facts\n\nIn Azure Virtual Desktop desktop sessions, an Intune-initiated Remote Help request is broadcast to all active users on the host. RemoteApp sessions cannot be directly targeted from the Intune admin center. Microsoft recommends the security-code method for both cases to reach the correct user session. Within a RemoteApp session, help is limited to the published app rather than the full desktop. The restart option is unavailable when remotely helping AVD. [Microsoft Learn](https://learn.microsoft.com/en-us/intune/remote-help/start-session).\n\n## Applicability\n\nUse this procedure when the person needing help is inside an AVD desktop or RemoteApp session. Confirm which session and published resource the user is actually using before choosing how to start assistance.\n\n## DSE recommendation\n\nMake user-session identification part of the support handoff. Exchange the code through the approved contact channel and ask the user to open Remote Help inside the affected session. Do not treat the shared host’s device record as sufficient identification of the person needing support. Keep the expected view limited to the desktop or app appropriate to that session.\n\n## Verification\n\nDuring a controlled support test, confirm that the intended user enters the code and that the helper sees the expected session. For RemoteApp, verify the published application’s scope rather than expecting unrelated desktop access. Document the session identity without capturing unnecessary application content. If the wrong user or resource appears, end the connection and correct the targeting before continuing assistance.\n\n## Official references\n\n[Microsoft Learn: Using Remote Help on Windows to Assist Authenticated Users](https://learn.microsoft.com/en-us/intune/remote-help/start-session)." }, "json_ld": { "@context": "https://schema.org", "@graph": [ { "@type": "Organization", "@id": "https://dsesecurity.com/#organization", "name": "Detection Systems & Engineering", "alternateName": "DSE Security", "url": "https://dsesecurity.com/", "logo": { "@type": "ImageObject", "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20" } }, { "@type": "Organization", "@id": "https://update.dsesecurity.com/#editorial-team", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/", "parentOrganization": { "@id": "https://dsesecurity.com/#organization" } }, { "@type": "WebSite", "@id": "https://update.dsesecurity.com/#website", "name": "DSE Updates", "alternateName": "DSE Security Knowledge Hub", "url": "https://update.dsesecurity.com/", "inLanguage": "en-US", "publisher": { "@id": "https://dsesecurity.com/#organization" }, "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@type": "WebPage", "@id": "https://update.dsesecurity.com/updates/dse-20260909-201-target-the-correct-avd-user-when-starting-remote-help/", "url": "https://update.dsesecurity.com/updates/dse-20260909-201-target-the-correct-avd-user-when-starting-remote-help/", "isPartOf": { "@id": "https://update.dsesecurity.com/#website" }, "lastReviewed": "2026-09-09" }, { "@type": "BreadcrumbList", "@id": "https://update.dsesecurity.com/updates/dse-20260909-201-target-the-correct-avd-user-when-starting-remote-help/#breadcrumbs", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "DSE Updates", "item": "https://update.dsesecurity.com/" }, { "@type": "ListItem", "position": 2, "name": "Target the correct AVD user when starting Remote Help", "item": "https://update.dsesecurity.com/updates/dse-20260909-201-target-the-correct-avd-user-when-starting-remote-help/" } ] }, { "@type": [ "Article", "TechArticle" ], "@id": "https://update.dsesecurity.com/updates/dse-20260909-201-target-the-correct-avd-user-when-starting-remote-help/#article", "identifier": "https://update.dsesecurity.com/updates/dse-20260909-201-target-the-correct-avd-user-when-starting-remote-help/", "url": "https://update.dsesecurity.com/updates/dse-20260909-201-target-the-correct-avd-user-when-starting-remote-help/", "headline": "Target the correct AVD user when starting Remote Help", "description": "How should a helper reach one Azure Virtual Desktop user instead of broadcasting a request to a shared host?", "abstract": "How should a helper reach one Azure Virtual Desktop user instead of broadcasting a request to a shared host?", "articleBody": "Source facts\nIn Azure Virtual Desktop desktop sessions, an Intune-initiated Remote Help request is broadcast to all active users on the host. RemoteApp sessions cannot be directly targeted from the Intune admin center. Microsoft recommends the security-code method for both cases to reach the correct user session. Within a RemoteApp session, help is limited to the published app rather than the full desktop. The restart option is unavailable when remotely helping AVD. Microsoft Learn.\nApplicability\nUse this procedure when the person needing help is inside an AVD desktop or RemoteApp session. Confirm which session and published resource the user is actually using before choosing how to start assistance.\nDSE recommendation\nMake user-session identification part of the support handoff. Exchange the code through the approved contact channel and ask the user to open Remote Help inside the affected session. Do not treat the shared host’s device record as sufficient identification of the person needing support. Keep the expected view limited to the desktop or app appropriate to that session.\nVerification\nDuring a controlled support test, confirm that the intended user enters the code and that the helper sees the expected session. For RemoteApp, verify the published application’s scope rather than expecting unrelated desktop access. Document the session identity without capturing unnecessary application content. If the wrong user or resource appears, end the connection and correct the targeting before continuing assistance.\nOfficial references\nMicrosoft Learn: Using Remote Help on Windows to Assist Authenticated Users.", "datePublished": "2026-09-10T00:28:35+00:00", "dateModified": "2026-09-10T01:20:45+00:00", "mainEntityOfPage": { "@id": "https://update.dsesecurity.com/updates/dse-20260909-201-target-the-correct-avd-user-when-starting-remote-help/" }, "inLanguage": "en-US", "isAccessibleForFree": true, "author": { "@type": "Organization", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team" }, "publisher": { "@id": "https://dsesecurity.com/#organization" }, "image": { "@type": "ImageObject", "@id": "https://update.dsesecurity.com/updates/dse-20260909-201-target-the-correct-avd-user-when-starting-remote-help/#primaryimage", "url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20", "contentUrl": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20", "width": 1200, "height": 630, "caption": "Target the correct AVD user when starting Remote Help" }, "articleSection": [ "Business Continuity", "IT" ], "keywords": [ "Business Continuity", "IT", "Guide", "Information priority" ], "genre": "Guide", "about": [ { "@type": "Thing", "name": "Business Continuity", "url": "https://update.dsesecurity.com/topic/business-continuity/" }, { "@type": "Thing", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" } ], "wordCount": 242, "timeRequired": "PT2M", "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usageInfo": "https://update.dsesecurity.com/usage/", "copyrightHolder": { "@id": "https://dsesecurity.com/#organization" }, "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "citation": { "@type": "CreativeWork", "name": "Using Remote Help on Windows to Assist Authenticated Users - Microsoft Intune | Microsoft Learn", "url": "https://learn.microsoft.com/en-us/intune/remote-help/start-session" } } ] } }