I have a number of machines that need to have easy, unattended, access enabled to specific set of users (A group of admins, if you will, managing a set of shared machines). The key is to have access to a remote machine without physical access to it.
If I've understood correctly, easy access can only be granted to the very user that is signed in to TeamViewer on the machine. I.e. to grant myself easy access on a remote machine, I need to run TeamViewer on the remote machine with my TeamViewer account.
Moreover, I have understood so that there is no way to allow easy access e.g. to a group of users (e.g. by specific permissions)?
So to allows EA to more than one user, I could come up with two alternatives:
1) Make one TeamViewer account per machine, run TeamViewer on the machines using the machine-specific account, with Easy Access enabled.
- Whenever someone needs to access that machine, they have to sign in to TeamViewer using the account for that machine.
- Multiple account details have to be shared to multiple users, which sounds like a bad idea (lot of overhead)
- If a machine account is compromised, only that machine is compromised and nothing else (from TeamViewer perspective).
2) Make one shared account that is used to run TeamViewer on all the shared machines, with Easy Access enabled.
- The users needing to access the machine have to use this shared account to sign in to TeamViewer.
- Very little overhead, as only single account needs to be shared.
- If the account is compromised, all machines are compromised, which obviously is a major disaster.
Have I understood correctly the available options? Or is there some other way, a nice and clean method for enabling shared easy access to a set of machines?
