Deploy TeamViewer (v13.1 and below) via Windows Group Policy - TeamViewer Support
<main> <article class="userContent"> <h2 data-id="general">General</h2><div class="blockquote"><div class="blockquote-content"><p class="blockquote-line"><em>This article applies to all TeamViewer customers with a </em><a href="https://teams.microsoft.com/_" rel="nofollow noreferrer ugc"><em>Corporate</em></a><em> or </em><a href="https://www.teamviewer.com/teamviewer-tensor/" rel="nofollow noreferrer ugc"><em>Tensor</em></a><em> license.</em></p></div></div><p>In this article, you learn how to deploy TeamViewer using the Windows Group policy in two steps.</p><p><strong>⚠IMPORTANT NOTE</strong>: This article only applies to V13.1 and below. Since 13.2, the TeamViewer MSI is all handled by parameters. Please see our article on these improvements here:</p><div class="js-embed embedResponsive" data-embedjson="{"body":"This article applies to all TeamViewer customers with a Corporate or Tensor license. This article applies to TeamViewer version 13.2 or newer. Supported Windows versions: Win 7, Win 8 and Win 10 This article explains how you can deploy TeamViewer Host and TeamViewer Full in a mass deployment scenario on Windows.…","url":"https:\/\/community.teamviewer.com\/English\/kb\/articles\/39639-mass-deployment-improvements","embedType":"link","name":"Mass deployment improvements - TeamViewer Support"}"> <a href="https://community.teamviewer.com/English/kb/articles/39639-mass-deployment-improvements" rel="nofollow noreferrer ugc"> https://community.teamviewer.com/English/kb/articles/39639-mass-deployment-improvements </a> </div><p><br></p><h3></h3><h2 data-id="create-your-customized-teamviewer-host-module">Create your customized TeamViewer Host module</h2><p><strong>The first step</strong> would be to design a customize TeamViewer Host with your own branding, including logo and text within your Company profile.</p><p>Visit the <a href="https://login.teamviewer.com/nav/deploy" rel="nofollow noreferrer ugc">Design & Deploy within the TeamViewer Management Console</a> to setup your customizations of the <strong>Host module</strong>.</p><div class="embedExternal embedImage display-large float-none"> <div class="embedExternal-content"> <a class="embedImage-link" href="https://us.v-cdn.net/6032394/uploads/lithium_attachments/2621i00ED27E0EC5E243C.jpg" rel="nofollow noreferrer noopener ugc" target="_blank"> <img class="embedImage-img" src="https://us.v-cdn.net/6032394/uploads/lithium_attachments/2621i00ED27E0EC5E243C.jpg" alt="Host.jpg" height="180" width="320" loading="lazy" data-display-size="large" data-float="none"></img></a> </div> </div> <p><br></p><p>After you created the Host customizations a <strong>ConfigurationID</strong> will be generated.</p><div class="embedExternal embedImage display-large float-none"> <div class="embedExternal-content"> <a class="embedImage-link" href="https://us.v-cdn.net/6032394/uploads/lithium_attachments/2622iFD2FB7A60AA720F9.jpg" rel="nofollow noreferrer noopener ugc" target="_blank"> <img class="embedImage-img" src="https://us.v-cdn.net/6032394/uploads/lithium_attachments/2622iFD2FB7A60AA720F9.jpg" alt="confID.jpg" height="180" width="320" loading="lazy" data-display-size="large" data-float="none"></img></a> </div> </div> <p><br></p><p>To deploy the TeamViewer Host with your customizations, simply extend the file name of the TeamViewer_Host.msi with <strong>-idc</strong> and append the <strong>ConfigurationID</strong> to it.</p><p>Set the new filename within your group policy as a software package.</p><pre class="code codeBlock" spellcheck="false" tabindex="0">Filename example: ConfigurationID: hcl79ca Original filename: TeamViewer_Host.msi Resulting filename: TeamViewer_Host-idchcl79ca.msi </pre><p><strong>📌Note</strong>: Please make sure not to miss the -idc prior to the ConfigurationID and also modify your Group Policy to match with the new file name.</p><p><br></p><h3 data-id="-1"></h3><h2 data-id="set-up-the-group-policy">Set up the Group policy</h2><p>The Group Policy can be set up as follows:</p><p>You have to <strong>create a network share</strong> that is accessible from all computers where you want TeamViewer to be installed. Place the required TeamViewer files on this network share, <strong>create a Group Policy Object</strong> and link it to your domain or an organizational unit.</p><p>Add your TeamViewer MSI package as a software installation package to this GPO.</p><ol><li>Create a network share that is accessible to all computers that receive the TeamViewer installation. The example shows a network share which already contains the appropriate installation files.</li><li>Start the Group Policy Management Console and create a Group Policy Object (i.e. TeamViewer_MSI) under your Domain (or Organizational Unit).</li><li>Select the created GPO (Group Policy Object) and add all computers or groups to which the GPO has to be applied in the section Security Filtering.</li><li>Edit the GPO and navigate to Computer Configuration / Software Settings. Right-click Software Installation and add a new package.</li><li>Enter the network share (UNC) of the TeamViewer MSI package. </li><li>When you open the package select the deployment method Assigned.</li></ol><p><strong>💡Hint</strong>: In order to <strong>prevent the assignment confirmation from showing up</strong>, the automated account assignment will have to be added with the Active Directory via a service connection point. This will prevent each user from having to manually confirm the assignment when TeamViewer first starts after deployment. </p><p>To create an SCP via the <strong>TrustConfigID.ps1</strong> script, follow these steps: </p><ol><li>Run the <strong>TrustConfigID.ps1</strong> script from the downloaded zip-file as an administrator. Either run the script via right-click or open it within the Windows PowerShell.</li><li>Enter a <strong>ConfigurationID</strong> you want to add and click ENTER. </li><li>If it is the first Configuration ID you want to add, you have to enter a path and a name for the TeamViewer serviceConnectionPoint (SCP). </li></ol><p>The default name will be <strong>TeamViewer</strong> if no name is provided. The default path will be <strong>CN=System, DC=domain, DC=com</strong> if no path is provided.</p><p>In order to <strong>deploy TeamViewer with predefined settings</strong> <strong>and</strong> also a <strong>Password</strong> for unattended access which is required for the Host, the password needs to be exported in the <strong>TeamViewer_Settings.reg</strong> file.</p><p>This can be done from an installed TeamViewer, via <strong>Extras </strong>--> <strong>Options </strong>--><strong> Advanced</strong> then select <strong>Export options to *.reg file</strong> at the bottom of the list.</p><p>After you have selected the name of the file <strong>TeamViewer_Settings</strong> and <strong>saved</strong> it to the <strong>same</strong> <strong>folder</strong> <strong>where the MSI package was stored,</strong> you will be able to enter the Password in the panel.</p> </article> </main>
