Mac install problems & script

ben15

We are having issues with installing mac on Catalina (latest mac OS) based on the below. We need a way of overcoming this - as we need to install for clients who would not be able to follow the required process / have admin rights. Is there a script available to assist with TeamViewer install on the latest OSx?

"Apple has introduced a security mechanism with macOS 10.14 (Mojave), which requires special access to be granted to remote control applications like TeamViewer.

And macOS 10.15 (Catalina) has strengthened the security and privacy even further, and requires additional permissions to be given to TeamViewer in order to control your Mac."

MoreCoffee

@ben15 Just to add a few more specific infos on top of what @Ying_Q already mentioned ... there are two parts to having everything up & running on macOS Catalina (10.15).

Part 1: Installation

To install TeamViewer on a Mac, an admin password is needed. If you are managing the users' Macs, installation can of course be automated using whatever tools you normally use to deploy packages to their systems. And, as @Ying_Q mentioned, there's also the possibility of using TeamViewer QuickSupport –  no installation (or admin password) required.

Part 2: User Consent required by macOS

In recent years, Apple has tightened privacy and security in macOS. The OS now requires explicit user consent for apps to be able to access certain functionality. TeamViewer is required to obtain user consent to use these features:

• Accessibility to control the Mac's mouse/keyboard (since macOS 10.14)
• Screen Recording to capture screen contents (since macOS 10.15)
• Full Disk Access to browse/access all files and folders on disk for File Transfer (since macOS 10.15)

Accessibility

• Consent can be given by the user in System Preferences > Security & Privacy > Privacy > Accessibility. An admin password is required.
  
• For Macs in an organization, this can also be permitted by the admin using an MDM system through Privacy Preferences Policy Control (PPPC) payloads.

Screen Recording

• Consent can be given by the user in System Preferences > Security & Privacy > Privacy > Screen Recording. An admin password is not required.
  
• To my knowledge, Apple currently provides no way to permit screen recording through MDM.

Full Disk Access

• Consent can be given by the user in System Preferences > Security & Privacy > Privacy > Full Disk Access. An admin password is required.
• For Macs in an organization, this can also be permitted by the admin using an MDM system through Privacy Preferences Policy Control (PPPC) payloads.
• Assuming you have already given permission to TeamViewer for Accessibility and Screen Recording, Full Disk Access can be configured remotely by going to System Preferences during a TeamViewer Remote Control session.

To sum it up:

• If you are managing your clients' Macs using an MDM, you can deal with everything using your MDM system, except for Screen Recording consent, which needs to be given by the user and does not require an admin password.
• If you are not managing your clients' Macs, they either need an admin password for installation or can use QuickSupport. Once they have TeamViewer running, focus on helping them to set up Screen Recording acess (no admin password required). After they have given that, you can see what they are doing and guide them to accomplish whatever else needs to be done. If you need to control the Mac's mouse/keyboard, macOS requires an admin password to consent to Accessibility access.