Microsoft Adds Unattended Remote Troubleshooting to Intune

Microsoft has introduced unattended remote troubleshooting for Windows, allowing IT administrators to access and manage physical PCs without requiring an end user to be present [2]. This feature, part of the August 2026 Intune service release, addresses a long-standing request from helpdesk teams to perform maintenance on corporate devices without interrupting the user or requiring their active participation [2].

Expanding IT control

Previously, Windows Remote Help sessions required the end user to manually accept a connection request, a process that often delayed maintenance or required coordination between staff and employees [2]. The new unattended mode allows authorized helpdesk personnel to connect directly to the Windows login screen using their own credentials [2]. When a session begins, the system locks the user's active session, preserving their open applications while the administrator works in a separate, secure environment [2].

The feature is restricted to physical, corporate-owned Windows devices that are enrolled in Intune and joined to Microsoft Entra ID or hybrid Entra ID [2]. It does not currently support personal devices, Windows 365 Cloud PCs, or Azure Virtual Desktop environments [2]. To enable this functionality, organizations must ensure the target PC is running an x64-based version of Windows and has the Intune Management Extension, Azure Virtual Desktop Agent, and the Azure Virtual Desktop Agent Bootloader installed [2].

Security and administrative requirements

Microsoft has implemented strict access controls to mitigate the risks associated with remote, unattended access. Administrators must assign a specific role-based access control (RBAC) permission, titled "Windows unattended control remote sign-in," to support staff [2]. This permission can be scoped to specific device groups, allowing organizations to limit who can initiate these sessions [2].

The system provides full auditability, with all session activity tracked through Intune logs, allowing administrators to monitor who accessed a device and when [2]. While the feature is available to users with Intune Suite, the Remote Help standalone add-on, or eligible Microsoft 365 E3/E5 licenses, the setup requires specific configuration of Remote Desktop and agent deployment via Intune [2].

What to watch

• Expansion of device support: Monitor whether Microsoft extends unattended access to virtual environments like Windows 365 or Azure Virtual Desktop in future service updates.
• Adoption rates: Observe how IT departments transition from attended to unattended workflows, particularly regarding the management of remote or hybrid workforces.
• Agent stability: Watch for updates to the Azure Virtual Desktop Agent and Bootloader, which are required to manage these sessions automatically [2].

The shift toward unattended support marks a significant change in how Microsoft manages the Windows ecosystem, moving away from the collaborative troubleshooting models that defined earlier versions of the operating system. Whether this capability will eventually be extended to broader device categories remains the primary question for enterprise IT managers.