The target of the TeamViewer-Intune integration is to enable IT Administrators to remotely administer an Intune-managed device; providing remote assistance to information workers.
Through the troubleshooting portal, Admins will:
This document intends to address Intune IT Admins and Help Desk support staff.
It is assumed that the reader is familiar with using Intune in Azure.
Microsoft Intune --> Intune roles - All roles --> Intune roles – Permissions --> Remote tasks:
Request Remote Assistance: Initiates a remote assistance session with a user's device by using TeamViewer. TeamViewer must be configured for your tenant. Remote assistance with TeamViewer supports Windows MDM managed PC's, Android PCs. HoloLens, Surface Hub and Windows 10 S devices are not supported.
The TeamViewer integration in Intune offers key features and workflows:
The integration benefits administrators; streamlining remote administration when support cases surface and the TeamViewer Connector is pre-built into the Intune platform. No separate installation necessary!
This manual describes how to enable the TeamViewer Connector and initiate the remote assistance request to Intune-Managed devices. It also provides an overview of the various features provided by the integration.
Installing the TeamViewer application is optional. In case you do not install TeamViewer, a run-once version of TeamViewer is downloaded when you try to join/initiate a TeamViewer session. Else, the TeamViewer window will be opened automatically. We recommend installing the TeamViewer application as this will reduce the time required to remotely administer a device. To install the TeamViewer App, follow the below steps:
The TeamViewer integration in Intune is pre-built, only requiring the end user to enable the integration and link their TeamViewer account.
Please make sure prerequisites have been met.
To enable the TeamViewer integration:
If users experience an error message after this step, please ensure a proper Intune license is associated with the account. Please see section ‘Prerequisites’ for further information.
Video demonstration below or the attached .mp4 file "EnableTV":
To remotely administer an Intune managed device, administrators will need to select a device via Intune ‘Troubleshooting’ e.g. Microsoft Intune > Troubleshoot or ‘Devices’ e.g. Microsoft Intune > Devices. In this use case we will be requesting remote assistance to a user’s device through the Troubleshooting portal.
Once IT select’s the problematic device, they can view the full dashboard listing the device status and initiate ‘New Remote Assistance Session’ to the user’s device by selecting ‘…More’ in top right corner.
On the remote side, the Company Portal App’s flag notification prompts the IW to accept the request and confirm to allow remote control.
Video demonstrations below or see attached .mp4´s:
TeamViewer offers an MSI deployment package to install TeamViewer Full Clients or Host modules to your entire network of Windows 10 devices silently, without IT staff leaving their desk or requiring manual actions from end users.
When deploying the MSI as a Line-of-Business App, IT Admins can use command-line switches to:
Steps to deploy MSI package:
3. In the configuration screen, you can customize the Host module.
The following visual customizations are available for your customized Host:
The following settings are available on the custom Host module:
Under App package file, open the file explorer and select the previously downloaded and extracted MSI file named TeamViewer_Host.msi. Configure details defining a description for the App, input TeamViewer as the trusted publisher, and most importantly paste the required command-line parameters.
Here is a recommended command-line to install the custom Host created earlier in this article. Replace %YOURAPITOKEN% and %YOURCUSTOMCONFIGID% with the API token and Configuration ID you previously saved and documented:
If you would like to enable unattended access (also known as Easy Access) when this host is installed, add this parameter to the end of the command-line:
More deployment details, installation switches, and options are available in our full MSI deployment article at this link.
Once available, navigate to Client Apps, select the TeamViewer Host LOB App, manage the assignment as ‘required’ to silently force the installation, select group of devices and confirm all changes have been saved.
Monitoring the installation status; confirming the deployment was successful, we cross-reference the device’s hostname and secure unattended access from the TeamViewer full client.
Video demonstrations below:
Through Intune’s EMM system - supporting App Configuration Policies for Managed Apps, Admins can deploy the TeamViewer Host App to support Android phones and tablets. Devices include Samsung, Asus, Honeywell, Caterpillar, Lenovo, Sony and more…. Please check the following Community article for a list of supported devices and Add Ons.
Once the Android Host is deployed, in addition to remote view & remote control, TeamViewer enables chat support, secure file transfer, viewing system information and the ability to stop or uninstall problematic Apps. Admins can now benefit with the ability to access unattended devices used as POS systems or Kiosks.
In the configuration screen define a name for the module and select a group where the managed device will display. Make sure to copy the configuration link after saving the module for later steps.
Important: Please make sure that default ‘Device Type Restrictions’ is not blocking ‘Android work profile’ and the permissions is configured to ‘Allow’
Video demonstrations below: