Read this article in:ChineseSpanish |Japanese 


This article applies to all TeamViewer customers with a Corporate or Tensor license.

This article applies to TeamViewer version 14.3 or newer.

This article applies to macOS Mojave and newer (macOS 10.14+)

Introduction

This article explains how you can deploy TeamViewer in a mass deployment scenario to macOS Mojave by deploying the Accessibility permission.

In this example, we use Mobile Iron as MDM solution. Any other MDM solution that supports the configuration of Accessibility permissions should work in a similar way.

Steps to do

  1. Open Mobile Iron and go to "Configurations" from the upper menu:
    image.png
  2. Select "Add" to add a new configuation:image.png
  3. Select "Privacy Preferences":image.png
  4. Enter a name for your new configuration:image.png
  5. Scroll down to "Accessibility" and add a new action:image.png
  6. Depending on the app you are using, please use the following bundle identifiers:

    AppVersion

    Bundle Identifier

    Code requirement

    TeamViewer Full normal

    com.teamviewer.TeamViewer

    designated => anchor apple generic and identifier "com.teamviewer.TeamViewer" and (certificate leaf[field.1.2.840.113635.100.6.1.9] /* exists */ or certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = H7UGFBUGV6)

    TeamViewer Full start as service

    com.teamviewer.TeamViewer

    designated => anchor apple generic and identifier "com.teamviewer.TeamViewer" and (certificate leaf[field.1.2.840.113635.100.6.1.9] /* exists */ or certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = H7UGFBUGV6)

     

    com.teamviewer.Desktop

    designated => anchor apple generic and identifier "com.teamviewer.TeamViewer" and (certificate leaf[field.1.2.840.113635.100.6.1.9] /* exists */ or certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = H7UGFBUGV6)

    TeamViewerHost

    com.teamviewer.TeamViewerHost

    designated => anchor apple generic and identifier "com.teamviewer.TeamViewerHost" and (certificate leaf[field.1.2.840.113635.100.6.1.9] /* exists */ or certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = H7UGFBUGV6)

    TeamViewer QuickSupport

    com.teamviewer.TeamViewerQS

    designated => anchor apple generic and identifier "com.teamviewer.TeamViewerQS" and (certificate leaf[field.1.2.840.113635.100.6.1.9] /* exists */ or certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = H7UGFBUGV6)


    example for a TeamViewer Host:
    image.png

    1. In the Identifier field add: com.teamviewer.TeamViewerHost
    2. In the Identifier Type field select: Bundle ID
    3. In the Code Requirement field add: anchor apple generic and identifier "com.teamviewer.TeamViewerHost" and (certificate leaf[field.1.2.840.113635.100.6.1.9] /* exists */ or certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = H7UGFBUGV6)
  7. Press "Save".
  8. The new configuration is created and can be found under Accessibility:image.png
  9. Press "Next".
  10. Now you can choose the devices you want to distribute this new configuration to:image.png
  11. Select the devices you want to distribute the the new configuration to (e.g. "All Devices").
  12. Press "Done".

Checking status of applied configuration in MobileIron

Mobile Iron will now the selected Teamviewer App(s) to Accessability of the selected devices. This can take a while, depending on your configuration, online state of the device(s) and other steps during your configuration. 

The current state (e.g. updated, pending) of your configuration on a specific device can be checked under "Devices" in the upper menu. The Configuration should change from "Pending install" to "Installed" after a while:

image.png

Checking configuration directly on macOS

After MobileIron applied the configuration to you devices you can check to the macOS device(s) whether the configuration was successfully updated.

  1. Open the "System preferences" on the target macOS device:
    image.png
  2. open the  "Security and Privacy" page.
  3. Switch to the "Privacy" tab.
  4. Select "Accessibility".
  5. Teamviewer should be visible there with enabled Accessibility permissions:image.png

If the rule was applied successfully but TeamViewer is not visible, you may not have installed TeamViewer on the device yet. Without TeamViewer being installed, the rule will not be visible on this page. Nevertheless the rule is still active. After installing Teamviewer it gets the required permissions and will be listed under "Accessibility" automatically.

 

Version history
Revision #:
5 of 5
Last update:
‎13 Jun 2019, 7:55 AM
Updated by: