1st-Level AI Support: What It Can and Can't Do

There is no AI in IT support that can do everything. There is one that tells you what it doesn't do.

AI service desks are promising a lot right now: reset a password, create an account, open a port, restart a server, all by chat. SuperSupport draws the line deliberately tighter. The agent solves the problems employees have on their device and leaves administration to IT. This overview shows where the line is and why.

What is 1st-level support, actually?

1st level is the first help for an employee with a specific problem. It usually concerns one device or one program, and exactly one person. Administration, by contrast, changes what applies to many people: accounts, permissions, network, servers, software on all devices.

This distinction is the core of the approach: What affects only one device, the agent can solve itself. What affects everyone, IT decides.

What can the SuperSupport agent do?

It works directly on the employee's Windows or Mac device, with targeted, logged checks and commands. Typical cases:

• Printer offline – checks status, queue, spooler; see Printer offline
• Outlook hangs – checks profile, add-ins, processes; see Outlook hangs on Loading Profile
• OneDrive isn't syncing – checks sign-in, storage, conflicts; see OneDrive isn't syncing
• Camera or microphone in Teams – checks devices and permissions; see Teams camera and microphone
• Laptop slow – measures processes, memory, CPU; see Slow laptop
• Update fails – reads the error code and history; see Windows Update fails
• VPN won't connect – checks client, network, time; see VPN authentication failed

It handles safe tasks itself, such as restarting the Print Spooler or flushing the DNS cache. It submits anything risky to IT for approval. Every step is in the log, and every chat is also the case.

What does SuperSupport deliberately not do?

SuperSupport deliberately leaves out six things that other AI service desks offer. Each one has its own article:

1. Reset passwords and MFA: an identity question, not a device problem. See Why SuperSupport doesn't reset passwords.
2. Manage users and licenses: decisions about costs, permissions and data. See Why SuperSupport doesn't manage users and licenses.
3. Change firewall and network rules: applies to everyone, and port openings are entry points. See Why SuperSupport doesn't change firewall rules.
4. Restart or maintain servers: a restart affects the whole office. See Why SuperSupport doesn't restart servers.
5. Deploy software to all devices: an error on all devices is a standstill. See Why SuperSupport doesn't deploy software to all devices.
6. Control the screen by mouse and keyboard: hard to control, hard to trace. See Why SuperSupport doesn't take over the screen.

Why this limit?

Because each of these capabilities needs administrator rights, in the directory, on the firewall, on the servers, in device management. A support tool with all of these rights would be the most rewarding target in the company for attackers: whoever manipulates the chat could change passwords, open ports or deploy software.

Three more reasons come on top:

• Impact: An error at a workstation affects one person; an error in administration affects everyone.
• Responsibility: Whoever assigns permissions, licenses and rules has to know the consequences and answer for them.
• Proof: Auditors, insurers and NIS2 ask who changed what and when. See Cyber insurance and NIS2 for MSPs.

What happens to requests beyond the limit?

Beta

IT support that fixes itself.

supersupport.ai handles your 1st-level support fully automatically. Secure your spot on the waitlist now.

Join the Waitlist

They go to IT in full, with findings instead of a vague description. The agent records what IT needs and narrows down on the device whatever can be narrowed down there:

• “Forgot my password” → pointer to self-service, see Reset your password yourself; otherwise handover to IT.
• “The new hire needs an account” → complete request with start date, role, programs and device.
• “The ERP isn't working” → check from the workstation: is the server reachable, is the port open, does it affect several devices?
• “The internet isn't working” → adapter, gateway, DNS, Wi-Fi. If the cause is the device, the agent fixes it; otherwise a case with measurements.

That way IT gets fewer tickets, and the ones that arrive are quicker to resolve.

Who is this approach right for?

• Internal IT teams who want to take everyday load off employees without giving yet another tool admin rights. See IT teams.
• MSPs who support many customers and don't want another privileged account in every customer tenant. See MSPs.
• Companies with security and documentation obligations who have to keep changes to identities and infrastructure traceable.

If your main goal is to automate password resets and account management, you are better served by Microsoft self-service, group-based licensing or automation in your RMM.

What does SuperSupport offer?

SuperSupport handles 1st-level IT support by chat, right on the Windows or Mac device: the agent handles safe tasks itself, submits anything risky to IT for approval, logs every step, and every chat is also the case. Multi-tenant for MSPs. What that looks like for internal IT teams and MSPs is described on their respective pages.

Frequently asked questions

What does an AI handle in 1st-level IT support?

The typical problems individual employees have on their own device: printer offline, Outlook hangs, OneDrive isn't syncing, Teams camera doesn't work, storage full, update fails. SuperSupport checks this directly on the Windows or Mac device and fixes it where that is safe.

What does SuperSupport deliberately not do?

Reset passwords and MFA, manage users and licenses, change firewall and network rules, restart servers, deploy software to all devices and control the screen by mouse and keyboard. Those are administration tasks, not 1st-level tasks.

Isn't that a disadvantage compared with other AI service desks?

It is a deliberate decision. Each of these capabilities needs far-reaching permissions in the company and turns the support tool into a worthwhile target for attackers. SuperSupport doesn't need these permissions for 1st-level support, so it doesn't get them.

What happens to requests the agent doesn't handle itself?

It records them completely, narrows the problem down on the device and hands IT a case with measurements. Risky steps on the device itself, it submits to IT for approval.

Who is this approach meant for?

For internal IT teams and MSPs who want to take everyday load off their employees or customers without giving yet another tool admin rights over the directory, network and servers.

Beta

IT support that fixes itself.

supersupport.ai handles your 1st-level support fully automatically. Secure your spot on the waitlist now.

Join the Waitlist