How to deploy TeamViewer using Windows Group Policy - V13.1 and Below

5% helpful (1/20)

Read this article in ChineseFrenchGerman | Japanese | Spanish

This article applies to all users with a Corporate license.

IMPORTANT NOTE: This article only applies to V13.1 and below. Since 13.2, the TeamViewer MSI is all handled by parameters. Please see our article on these improvements here

In this article, you learn how to deploy TeamViewer using Windows Group policy in two steps.

Create your customized TeamViewer Host module

The first step would be to design a customize TeamViewer Host with your own branding, including logo and text within your Company profile.

Visit the Design & Deploy within the TeamViewer Management Console to setup your customizations of the Host module.


After you created the Host customizations a ConfigurationID will be generated.


To deploy the TeamViewer Host with your customizations, simply extend the file name of the TeamViewer_Host.msi with -idc and append the ConfigurationID to it.

Set the new filename within your group policy as a software package.

Filename example: ConfigurationID: hcl79ca  

Original filename: TeamViewer_Host.msi  

Resulting filename: TeamViewer_Host-idchcl79ca.msi

NotePlease make sure not to miss the -idc prior to the ConfigurationID and also modify your Group Policy to match with the new file name.

Set up the Group policy

The Group Policy can be set up as follows:

You have to create a network share that is accessible from all computers where you want TeamViewer to be installed. Place the required TeamViewer files on this network share, create a Group Policy Object and link it to your domain or an organizational unit.

Add your TeamViewer MSI package as a software installation package to this GPO.

  1. Create a network share that is accessible to all computers that receive the TeamViewer installation. The example shows a network share which already contains the appropriate installation files.
  1. Start the Group Policy Management Console and create a Group Policy Object (i.e. TeamViewer_MSI) under your Domain (or Organizational Unit).
  2. Select the created GPO (Group Policy Object) and add all computers or groups to which the GPO has to be applied in the section Security Filtering.
  3. Edit the GPO and navigate to Computer Configuration / Software Settings. Right-click Software Installation and add a new package.
  4. Enter the network share (UNC) of the TeamViewer MSI package. 
  5. When you open the package select the deployment method Assigned.

Hint: In order to prevent the assignment confirmation from showing up, the automated account assignment will have to be added with the Active Directory via a service connection point. This will prevent each user from having to manually confirm the assignment when TeamViewer first starts after deployment. 

To create an SCP via the TrustConfigID.ps1 script, follow these steps: 

  1. Run the TrustConfigID.ps1 script from the downloaded zip-file as an administrator. Either run the script via right-click or open it within the Windows PowerShell.
  2. Enter a ConfigurationID you want to add and click ENTER. 
  3. If it is the first Configuration ID you want to add, you have to enter a path and a name for the TeamViewer serviceConnectionPoint (SCP). 

The default name will be TeamViewer if no name is provided. The default path will be CN=System, DC=domain, DC=com if no path is provided.

In order to deploy TeamViewer with predefined settings and also a Password for unattended access which is required for the Host, the password needs to be exported in the TeamViewer_Settings.reg file.

This can be done from an installed TeamViewer, via Extras --> Options -->  Advanced then select Export options to *.reg file at the bottom of the list.

After you have selected the name of the file TeamViewer_Settings and saved it to the same folder where the MSI package was stored, you will be able to enter the Password in the panel.

Version history
Revision #:
5 of 5
Last update:
‎15 Oct 2019, 4:06 PM
Updated by: