Many IT problems can be solved without anyone having to travel. Remote support, often also called remote maintenance, shortens the time to resolution, saves trips, and enables support for employees in the home office or at remote sites. At the same time, every remote access is a sensitive entry point that must be carefully secured.
How does remote support work?
There are two forms. With attended support, the user starts a session, usually via a small program or a session code, and confirms the access. Both sides see the same screen, and the technician can take over control if needed. With unattended access, a permanently installed agent is active on servers or clients, through which authorized persons can work even when no one is present at the device, for example for maintenance outside working hours.
With many solutions, both sides establish an encrypted connection to a relay service. As a result, no inbound ports need to be opened in the firewall. Good tools log sessions and require multi-factor authentication for support staff sign-ins. With attended support, it should be visible at all times that a session is running, and the person being supported should be able to end it themselves.
Typical examples
- A program no longer starts after an update, and the service desk looks at the error message directly on the screen.
- A printer is set up in the home office without the notebook having to be sent in.
- Updates on a server are installed via unattended access in an evening maintenance window.
- A new employee receives support setting up his workstation at the first sign-in.
What companies should keep in mind
- Define a single approved remote maintenance tool and let employees know how genuine support requests work.
- Raise employee awareness: unsolicited calls from supposed support staff asking for remote access are a widespread social engineering scam.
- Grant unattended access according to the principle of least privilege and review it regularly.
- Keep the remote maintenance software itself up to date, because it is an attractive target for attackers.
- With external service providers, clarify whether a data processing agreement (DPA) is required if personal data becomes visible in the process.