One of the recommended best practices for a XenDesktop deployment is placing virtual desktops in their own OU with GPO inheritance blocked. This ensures a clean group policy exists to customize for the special needs of a VDI environment.

Once you've configured port access for remote assistance through Desktop Director - 3389 and 5985 - don't forget to apply the required group policy to the desktops. This can be done through local policy or to the newly created GPO applied to your dedicated VDI OU.

Computer Configuration -&gt; Administrative Templates -&gt; System -&gt; Remote Assistance -&gt; Offer Remote Assistance.

Make sure to enable this object and also configure those allowed to perform the remote access.