Email-Based Group and Device Assignment - TeamViewer Tensor™ Setup Guide

This discussion has a more recent version.
Esther
Esther Posts: 4,052 Former Community Manager
in TeamViewer Tensor

Read this article in Japanese 


This article applies to all TeamViewer Tensor customers.

TeamViewer Tensor provides a secure, easy-to-use remote work infrastructure, so your teams can access company resources like desktop computers, mobile devices, server systems, and applications, or intranet sites from home or on the go.

 

Get Started

Step 1

Download and install TeamViewer on your device: teamviewer.com/download2020-08-20 13_51-Clipboard.png

 

Step 2

Open the License Activation email that was sent to the email account used to purchase the license. Click "Activate".

Note: If you have purchased more than one product, each license must be individually activated.

1_activate.png

 

Step 3 - Follow A or B

A: If you already have a TeamViewer account

Sign in with your existing TeamViewer account, click Activate and go to Step 4.

3_Sign In.png

 

B: If you do not have a TeamViewer account

  1. Create an account by clicking Sign Up.
    4_Sign Up.png

     

  2. Enter your email address, name and create a password. Read and accept the EULA and mark the captcha box. Click Activate.

    5_Sign Up.png

  3. An email has been sent to your inbox for account verification. Click the link in the email to verify your account and complete your license activation.

    6_Link.png

     

Step 4

You will be redirected to the Management Console where a pop-up that confirms your license was successfully activated. Click "OK".

2_success.png

 

Step 5

A pop-up is displayed with the option to open the TeamViewer application. Click Open TeamViewer.

8_Open TV.png

You are now signed into your TeamViewer account and have successfully activated your license.

Note: Please keep in mind that you always need to be signed in to your TeamViewer Account to have licensed connections. If you are not connected, you will be running with the free version.

9_GUI.png

 

Step 6 (Optional)

Follow the instructions for two-factor authentication in our Knowledge Base article Two factor authentication - Activation and Deactivation to complete the activation of your TeamViewer license. If you want to skip this step, click Not Now.

 

Create your company profile and a Master Account in the Management Console

1. Create a company profile by following the instructions in the section Create your company profile.

2. Once your company profile is created, we highly recommend creating a Master Account, which will serve as a generic administrative account.

Why create a Master Account?

  • Your company’s primary administrator(s) of TeamViewer will know the account credentials.
  • This account will be used for all future configuration steps, so administrative control and ownership are not tied to one specific person.
  • TeamViewer administration won’t be disrupted, even if the original administrator leaves that role.

For more details, follow the steps in our Knowledge Base article Using a Master Account for the TeamViewer Management Console 

Please note:

  • Make sure you do not create a Master Account with an e-mail distribution list (e.g., all@example.com), but with a specific e-mail address.
  • The created account must have a valid email address that can receive the account activation email (i.e., either a mailbox or an email distribution list you have access to).
  • We recommend using a non-personal email address for the Master Account.
  • We highly recommend protecting your TeamViewer account with two-factor authentification. For details, please refer to our Knowledge Base article Two factor authentication - Activation and Deactivation 

 

Create users

Under User management in the left navigation panel of the Management Console, click Add user to add people to your company profile that need to access their company devices remotely, along with every person that needs to be set up for remote work.

Follow the detailed steps in our Knowledge Base article All about the TeamViewer company profile 

2_TeamViewer Management Console.png

TeamViewer Management Console.png

 

Please note:

  • All users will receive a confirmation email for account activation.
  • Users will have to log in in order to activate their account and set a password. TeamViewer Tensor allows the use of single sign-on (SSO). Please visit Single Sign-On (SSO)  for more information.

With TeamViewer, you may want to use the following options down the road:

 

Create a group for your new devices

In the Management Console, click All in the left navigation panel.

Click Add group to create a group for your new devices. 

02.6_Tensor.png

 

Add new settings policy

The settings policy facilitates the management of your installed TeamViewer clients. You can centrally enforce settings and options for them.

In the Management Console, click Design & Deploy in the left navigation panel and then click Add policy. 

02.7_Tensor.png

Follow the detailed steps in our Knowledge Base article How to add a new settings policy .

Recommended policies for this scenario:

  • Blacklisting and whitelisting: Add your entire organization and click the option Allow access only for the following partners and then Add. In the following dialog, select the option with your company name. I_Step_5_b_UnicreditAdminGuide_MandatoryPol.jpg
    • With this option, all members of your Your Company will be whitelisted
  • Windows logon: Allow for all remote workers to connect with their Windows credentials. Please select the parameter: Allowed for all users.
    For more information regarding the Windows logon, please visit our Knowledge Base article here: Controlling the UAC on remote Windows PC 

    3_TeamViewer Management Console.png

Note: All connection attempts from others will be blocked, even if they know the TeamViewer ID and the password of the target computer.

  • Access control (incoming connections): Select Full access.
    We recommend to use the following custom settings: Tensore_Access_Control.png

     

  • Start TeamViewer with Windows: Select Enabled.
  • Disable TeamViewer shutdown: If activated, TeamViewer cannot be shut down. This is useful, for example, if the administrator wants to guarantee the continuous availability of a computer.
  • Prevent removing account assignment: Account assignment of the remote machine cannot be changed. The only way to remove the account assignment is to disable the policy.
  • Password strength: Select Disabled (no random password). Easy access will be granted to your remote workers instead.
  • Report connections to this device: If activated, connections to this device will be reported and can be viewed in the TeamViewer Management Console. For more information, see the manual for Management Console, section 7.2 “Device reports”, page 56.
  • Changes require administrative rights on this computer: TeamViewer options can only be changed by Windows user accounts with administrative rights.

Please note:

  • We recommend enforcing all policies.
  • Enforced policies can only be changed in the Management Console.

 

Deployment on Company Devices

 

Step 1: Create a deployment package for your TeamViewer Hosts

1.1 In the Management Console, click Design & Deploy in the left navigation panel and then click Custom module. Select the option Host in the drop-down menu.

1.2 Check or uncheck Allow customer to initiate a service case depending on if you want to allow customers to create service cases. Visit Improve support in teams with the Service Queue for more information about this feature.

1.3 Use the editing options on the left side to customize your Host. On the right side:

  • A: Enter a name.
  • B: Select the group you created in Step 4.
  • C: Select the policy you created in Step 5.
  • D: Activate Allow account assignment. 

II_Step_1_UnicreditAdminGuide_CustomHost.png

Note: By assigning a device to your Master Account, the device can be remotely managed and monitored by the Master Account at any time. The assignment is mandatory if you want to apply policies.

1.4 Click Save.

 

Step 2: Deploy your Hosts

IMPORTANT: Before you start any deployment, make sure to check your company firewall configuration:

1. Firewall configurations for ports:

  • TCP/UDP PORT 5938:
    • For performance reasons, we recommend opening the TCP/UDP port 5938 (outgoing). On networks that allow UDP protocols, TeamViewer attempts to get a peer-to-peer connection (will be tried with udp.teamviewer.com). TeamViewer prefers making outbound TCP and UDP connections over port 5938 — this is the primary port used for the best performance possible.
  • TCP PORT 443:
    • If TeamViewer can’t connect over port 5938, it will next try to connect over TCP port 443. Note: Port 443 is also used by our custom modules which are created in the Management Console. If you’re deploying a custom module (e.g., through group policy), then you need to ensure that port 443 is open on the computers to which you are deploying. Port 443 is also used for a few other things, including TeamViewer update checks.
  • TCP PORT 80:
    • If TeamViewer cannot connect over port 5938 or 443, it will try using TCP port 80. The connection speed over this port is slower and less reliable than ports 5938 or 443 due to the additional overhead used. There is no automatic reconnection if the connection is temporarily lost. Therefore, port 80 is only used as a last resort.

2. Firewall configuration for URLs:

Allow these TeamViewer processes for antivirus purposes:

  • TeamViewer.exe
  • TeamViewer_Desktop.exe
  • TeamViewer_Service.exe

Allow the following URLs on the proxy/firewall level:

  • *.teamviewer.com

The deployment of your Hosts on your remote workers' computers depends on the deployment method you use. We recommend referring to the Knowledge Base article Mass deployment improvements for more information.

In order to install and mass deploy TeamViewer on all your corporate devices without requiring user interaction, use the following command from within your script (see Example code below), directly from command line or in your deployment solution.

Before you begin, you’ll need the following information:

1_Customized_Host_Editing.png

  • API token: You can retrieve the API token under the host created (see Step 7.1).
  • Custom configuration ID: You can retrieve the custom configuration ID under the host created (see Step 7.1).
  • Group ID: Select the group where the device should show up and select the group ID in the URL g/123456789. Don’t forget to remove the / in your command line.

Example code:

Deployment using the Windows MSI installer via command line (value names in red are the values you need to enter):

start /wait MSIEXEC.EXE /I "MSIPATH" /qn CUSTOMCONFIGID=ConfigId DESKTOPSHORTCUTS=0
choice /C X /T 30 /D X > nul
"C:\Program Files (x86)\TeamViewer\TeamViewer.exe" assign --api-token=YourToken --grant-easy-access --alias %COMPUTERNAME% --group-id gXXXXXXXX --reassign --proxy ProxyUrl

 

Note: You can import TeamViewer options or settings during the installation process. For more information please see the section Apply TeamViewer options (recommended) in our Knowledge Base.

 

How to share the TeamViewer ID to specific users

 

Step 1: Create a script token in the Management Console

1.1 Log in to the Management Cosole and click Edit profile 03_Tensor.png

 

1.2 In the section apps, click Create script token. 04_Tensor.png

1.3 The token requires the following account permission for Computers & Contacts: View entries05_Tensor.png

1.4 Your script token has been successfully created 06_Tensor.png

 

Step 2: Run the PowerShell export tool

File name: Get.device.ID.And.Alias.ps1

2.1 Paste your copied token and press Enter

2.2 Once the export has been completed, select 2 and press Enter 

07_Tensor.png

 

2.3 Open the CSV file created. It should be automatically saved in the same folder where the PowerShell file has been executed. 

 

Step 3: Edit the CSV file

3.1 Select the column B and enter [Ctrl]+[F]  08_Tensor.png

3.2 Open the replace tab. Find r and click on Replace all by nothing. Make sure that you have selected the column B. 09_Tensor.png

 

Step 4: Export data from the Active directory

Extract the following data from the customer Active Directory:

  • PC host name
  • User name
  • User email address

 

Step 5: Merge Active Directory export and TeamViewer export

The goal here is cross both documents the AD export and the TeamViewer ID export and match the TeamViewer ID.

With Excel it’s easy to cross 2 documents: Use the Excel function =VLOOKUP and retrieve data from a specific column in the table. This will add in the TeamViewer IDs of all desktop computers into the AD export.

5.1 =Vlookup logic:=Vlookup, (PC host name [Cell D3], select the 2 columns of your TeamViewer export, tape 2 as the second column contains the IDs, Select "FALSE – Exact match" 10_Tensor.png

  • [red] Value --> “PC host name in the” AD export document
  • [green] The table --> select the two columns in the “TeamViewer Export”
  • [yellow] col_index --> set the number "2"
  • [blue] range_lookup --> Select FALSE = exact match

5.2 As a result, the TeamViewer IDs will match the right computer name. 11_Tensor.png

5.3 Note: Errors appear as #N/A 12_Tensor.png

5.3.1 If you encounter an error:

  • Edit the VLOOKUP function with the if effort as shown below: =IFERROR  (VLOOKUP(your command),"error")
  • Use Ctrl+F to find out why the computer host names in the Active Directory are not  the same as the ones in the TeamViewer export.

 

Step 6: Prepare the data base for the mass mailing

Copy and paste the result in the document: 2020.13.Data.base.For.Mailing.xlsx

Please make sure you chose the correct column in the document.13_Tensor.png

 

Step 7: Prepare the mass mailing

Note: The solution presented in the following section is a proposed "ready-to-go" option. You can use a preferred mailing solution of your own at any time.

7.1 Open the document 2020.03.Mail.Murge.docx and click No. 14_Tensor.png

7.2 In the section Mailings, click Start Mail Merge -->  Email Messages 15_Tensor.png

7.3 Map the Mass mailing with the data base by clicking on Use an existing list.16_Tensor.png

 

7.4 Click OK 17_Tensor.png

 

Step 8: Customize Emails

8.1 Adapt the standard mail, but do not adapt the Greeting line and the ID.18_Tensor.png

 

8.2 Customize the contact email of your administrator by right-clicking the text link contact your administrator. 19_Tensor.png

 

8.3 Check the results before sending 20_Tensor.png

8.4 Control before sending. Use the arrows to navigate between all the future custom emails. 

21_Tensor.png

 

8.5 Check the merge for errors. 22_Tensor.png

 

Step 9: Send out the mailing

9.1 Under Finish & Merge click Send Email Messages….  23_Tensor.png

 

9.2 In the section Message options, make sure that the email is selected.

9.3 Edit your subject line. 24_Tensor.png

 

Connecting your remote workers

  • If the remote worker is connecting from his own private computer to his corporate computer, please see our User Quickstart Guide "How to Use TeamViewer to Access Your Company Device from home" for detailed instructions.

  • If the remote worker is connecting from a corporate computer (with non-admin rights) to his corporate computer, we highly recommend to deploy the full version of TeamViewer on these computers first. We explain how to proceed in this Knowledge Base article right here: Deployment of the Full client 


08_Tensor.png

Your remote workers are now able connect to their corporate computer.

Former Community Manager

Tagged:
Trustpilot

Categories

This Week's Leaders