finally fixed this:

in the GPO, changed the "remote desktop help session manager" service to allow authenticated users read access - adding "NT AUTHORITY\Authenticated Users to the list. Now we longer have the "A program could not start" error message.

Labels: GPO, group policy, microsoft, remote assistance, windows

sounddoc