The target of the TeamViewer-Intune integration is to enable IT Administrators to remotely administer an Intune-managed device; providing remote assistance to information workers.
Through the troubleshooting portal, Admins will:
This document intends to address Intune IT Admins and Help Desk support staff.
It is assumed that the reader is familiar with using Intune in Azure.
Microsoft Intune --> Intune roles - All roles --> Intune roles – Permissions --> Remote tasks:
Request Remote Assistance: Initiates a remote assistance session with a user's device by using TeamViewer. TeamViewer must be configured for your tenant. Remote assistance with TeamViewer supports Windows MDM managed PC's, Android PCs. HoloLens, Surface Hub and Windows 10 S devices are not supported.
The TeamViewer integration in Intune offers key features and workflows:
The integration benefits administrators; streamlining remote administration when support cases surface and the TeamViewer Connector is pre-built into the Intune platform. No separate installation necessary!
This manual describes how to enable the TeamViewer Connector and initiate the remote assistance request to Intune-Managed devices. It also provides an overview of the various features provided by the integration.
Installing the TeamViewer application is optional. In case you do not install TeamViewer, a run-once version of TeamViewer is downloaded when you try to join/initiate a TeamViewer session. Else, the TeamViewer window will be opened automatically. We recommend installing the TeamViewer application as this will reduce the time required to remotely administer a device. To install the TeamViewer App, follow the below steps:
The TeamViewer integration in Intune is pre-built, only requiring the end user to enable the integration and link their TeamViewer account.
Please make sure prerequisites have been met.
To enable the TeamViewer integration:
If users experience an error message after this step, please ensure a proper Intune license is associated with the account. Please see section ‘Prerequisites’ for further information.
Video demonstration below or the attached .mp4 file "EnableTV":
To remotely administer an Intune managed device, administrators will need to select a device via Intune ‘Troubleshooting’ e.g. Microsoft Intune > Troubleshoot or ‘Devices’ e.g. Microsoft Intune > Devices. In this use case we will be requesting remote assistance to a user’s device through the Troubleshooting portal.
Once IT select’s the problematic device, they can view the full dashboard listing the device status and initiate ‘New Remote Assistance Session’ to the user’s device by selecting ‘…More’ in top right corner.
On the remote side, the Company Portal App’s flag notification prompts the IW to accept the request and confirm to allow remote control.
Video demonstrations below or see attached .mp4´s:
TeamViewer offers an MSI deployment package to install TeamViewer Full Clients or Host modules to your entire network of Windows 10 devices silently, without IT staff leaving their desk or requiring manual actions from end users.
When deploying the MSI as a LOB App, IT Admins are able through cmd line switch parameters to configure:
Steps to deploy MSI package:
Name: Something meaningful
Computers & Contacts: View, Add, Edit and delete entries
Command-line argument ex.
/qn APITOKEN=XXXXXXX-XXXXXXXXXXXXXXXXXX ASSIGNMENTOPTIONS="--grant-easy-access --alias %COMPUTERNAME% --reassign --group IntuneManaged"
Video demonstrations below:
Through Intune’s EMM system - supporting App Configuration Policies for Managed Apps, Admins can deploy the TeamViewer Host App to support Android phones and tablets. Devices include Samsung, Asus, Honeywell, Caterpillar, Lenovo, Sony and more…. Please check the following Community article for a list of supported devices and Add Ons.
Once the Android Host is deployed, in addition to remote view & remote control, TeamViewer enables chat support, secure file transfer, viewing system information and the ability to stop or uninstall problematic Apps. Admins can now benefit with the ability to access unattended devices used as POS systems or Kiosks.
In the configuration screen define a name for the module and select a group where the managed device will display. Make sure to copy the configuration link after saving the module for later steps.
Important: Please make sure that default ‘Device Type Restrictions’ is not blocking ‘Android work profile’ and the permissions is configured to ‘Allow’
Video demonstrations below: