Remote Assist and RDP

Remote Assist and browser RDP, with the user's consent

Remoat is the remote access module of Keepstone. Reach a PC through browser-based RDP via a gateway on your own network, or help a person at their desk with Remote Assist: they see who is connected and they decide whether to allow it.

Book a consultation

What you get

  • Browser RDP through your gateway

    Sessions run in the browser through a gateway on your own network. Windows passwords never touch Keepstone.

  • Remote Assist with consent

    The user sees your name, view or control, and your reason, and must click Allow. Nothing is captured before that.

  • The user stays in control

    While connected they see a red border and a pill with who is connected, and they can end the session any time.

  • No inbound ports on the PC

    PCs make outbound connections only. There is no listener on the PC for Remote Assist.

  • Approval first

    A head admin approves each PC before it can be connected to, and connecting needs a recent second factor.

  • Alerts and audit

    Rejected connections, stopped agents and tampering raise alerts, and every session is logged.

Questions, answered

What is the difference between Remote Assist and RDP?

RDP opens a Windows remote desktop session. Remote Assist shares the live screen of the signed-in user, after they click Allow, so you can help them where they are working.

Can I use RDP without a VPN?

RDP is reachable only from the gateway and your internal network. The gateway is what the browser session goes through, so PCs never expose RDP to the internet.

Can Remote Assist run without the user knowing?

No. The user must click Allow, a visible indicator stays on screen, and the session ends if the indicator cannot be shown. An unattended mode is not built.

Remote Assist and Browser RDP for IT Teams · Keepstone