{"id":197,"date":"2018-03-10T14:55:58","date_gmt":"2018-03-10T13:55:58","guid":{"rendered":"http:\/\/www.gerjon.com\/?p=197"},"modified":"2018-03-10T14:58:06","modified_gmt":"2018-03-10T13:58:06","slug":"adding-teamviewer-to-azure-intune-instance","status":"publish","type":"post","link":"https:\/\/www.gerjon.com\/?p=197","title":{"rendered":"Adding Teamviewer to Azure Intune instance"},"content":{"rendered":"

Microsoft advices to use Teamviewer<\/a> as the tool for remote assistance when using Azure Intune for managing endpoint devices. The setup process is fairly simple and you can use a trial subscription from Teamviewer for testing. I created this post to show you how to configure this but as Microsoft constantly updates\/changes features in Intune this post might be outdated.<\/p>\n

Setting up the teamviewer trial<\/strong><\/p>\n

Go to the teamviewer site (https:\/\/www.teamviewer.com<\/a>), on the top right corner of the site click on login<\/strong>. Click on register<\/strong> for a new account and fill in the required fields verify your not a robot and click register<\/strong>. You’ll receive an activation mail on the emailaccount you used at registeration. After activation you can log in on the teamviewer management portal.<\/p>\n

Setting up Azure Intune for Teamviewer<\/strong><\/p>\n

Log on to the Azure portal. Remember that to configure these settings the admin account you use must also have an Intune license! If the Admin doesn’t have a license configuration will fail when connecting Intune and Teamviewer.<\/p>\n

In the Azure Portal (https:\/\/portal.azure.com<\/a>) go to\u00a0Microsoft Intune<\/strong>\u00a0>\u00a0Devices<\/strong>\u00a0>\u00a0TeamViewer Connector<\/strong><\/p>\n

Click on\u00a0Connect<\/strong><\/p>\n

\"\"<\/a><\/p>\n

Read the connector permissions and click\u00a0OK<\/strong><\/p>\n

\"\"<\/a><\/p>\n

After clicking OK you can see the status of the connector has changed to connecting. Click on the log in to Teamviewer to authorize<\/strong> button.<\/p>\n

\"\"<\/a><\/p>\n

You are now redirected to the teamviewer login page. Log in with the credentials you created earlier.
\n(Screenshots from Teamviewer are in Dutch as for some reason i cannot switch this to English)<\/p>\n

\"\"<\/a><\/p>\n

When logging on you can receive an error stating that the computer used to loging cannot be validated as a trusted computer.
\nThis happens when you create the teamviewer account with another computer\/browser than the one you use for the authentication.<\/p>\n

This can be resolved by adding the computer\/browser to the trusted devices (you’ll receive an activation email for this).<\/p>\n

After logging on you get a warning:<\/p>\n

\"\"<\/a><\/p>\n

In short it states that Intune is authorized to connect to teamviewer and that all is well :-). Click on\u00a0Allow<\/strong> to continue.<\/p>\n

You are then redirected to your Azure tenant and after confirming your identity you get this screen informing you the authorisation is succesful<\/p>\n

\"\"<\/a><\/p>\n

When you look at your Intune portal you can see that the connection is working, if it still says connecting click on the refresh<\/strong> button.\"\"<\/a><\/p>\n

Configuring remote control<\/strong><\/p>\n

For the intune admins to shadow Windows users, the users must have the Microsoft company portal installed.<\/p>\n

By default you cannot force install windows store apps from Intune (to this date). You can only make it available in the company portal (that needs to be installed to show the portal, so there’s a twist there :-)).<\/p>\n

When you create a new Windows app (windows store) you can fill in all the required items<\/p>\n

\"\"<\/a><\/p>\n

But when you select the groups that can use the app you can only select make available for enrolled devices.<\/p>\n

\"\"<\/a><\/p>\n

But since we are lazy admins we want to automate the installation. luckely there is another way to fix this.<\/p>\n

Force installation company portal<\/strong><\/p>\n

On Windows, installation of the Company Portal can be automated via Business Store which is capable of pushing applications from the Public Store! We can use this to silently push any modern app from the public storeto the end-user\u2019s AAD joined or Domain Join + AAD registration Windows 10 device. End-users won\u2019t even need an Microsoft Account (MSA) to obtain the application.<\/p>\n

You configure this as follows:<\/p>\n

Browse to\u00a0http:\/\/microsoft.com\/business-store<\/a>\u00a0and logon with an administrative user in your tenant.<\/p>\n

Select\u00a0settings<\/i><\/strong>\u00a0and navigate to\u00a0Management\u00a0<\/i><\/strong><\/p>\n

\"\"<\/a><\/p>\n

Select search for free and paid products<\/strong><\/p>\n

\"\"<\/a><\/p>\n

search for Company portal<\/strong> in the search box and select Company portal<\/strong><\/p>\n

\"\"<\/a><\/p>\n

 <\/p>\n

select download<\/strong><\/p>\n

\"\"<\/a><\/p>\n

Accept the EULA and click continue<\/p>\n

\"\"<\/a><\/p>\n

After accepting the EULA you get a thank you for your order screen, you can click Close<\/strong>.<\/p>\n

\"\"<\/a><\/p>\n

Upon returning to the microsoft store screen click on\u00a0Settings<\/strong> and choose distribution<\/strong>.<\/p>\n

\"\"<\/a><\/p>\n

Scroll down to management tools and select activate<\/strong> on the Microsoft Intune line.
\n(You can also active the microsoft autodeployment rule this i also did for testing but is not nescessary for the deployment of the company portal)<\/p>\n

\"\"<\/a><\/p>\n

After clicking activate you can see both are activated and you can deactivate if nescessary.<\/p>\n

\"\"<\/a><\/p>\n

Head back over to the Intune portal. Select\u00a0Mobile Apps\u00a0<\/strong>-> Microsoft store for Business.
\n<\/strong>Select activate<\/strong> choose the language you prefer and select Sync<\/strong><\/p>\n

This Sync can take a while.<\/p>\n

\"\"<\/a><\/p>\n

After completing the sync head over to the apps<\/strong> menu. You can see the public store apps are now populated into the apps portal.<\/p>\n

\"\"<\/a><\/p>\n

Select the company portal (or any other store app you want to silently push to the windows devices).
\nChoose Assignments and select required. Then choose deploy to all devices<\/p>\n

\"\"<\/a><\/p>\n

Check the settings and click save.<\/p>\n

\"\"<\/a><\/p>\n

The company portal is now automatically pushed to all Windows 10 endpoints. you can wait a while or manually sync the endpoints via the settings menu.<\/p>\n

Finally remote control<\/strong><\/p>\n

After the sync is succeeded and the company portal app is installed, it’s time to remote control the endpoint.
\nBrowse to deevies and select the device you want to control.<\/p>\n

\"\"\u00a0<\/a><\/p>\n

Select the device, click on the more\u00a0<\/strong>button and select New Remote Assistance Session<\/strong>.<\/p>\n

\"\"<\/a><\/p>\n

After a few seconds the Start Remote Assistance<\/strong>\u00a0button wil appear.<\/p>\n

\"\"<\/a><\/p>\n

When you click the button, you are redirected to the Teamviewer page and Quicksupport is downloaded.<\/p>\n

\"\"<\/a><\/p>\n

\"\"<\/a><\/p>\n

Start the quicksupport tool after download.<\/p>\n

\"\"<\/a><\/p>\n

On the endpoint start the company portal and you’ll find that there is a flag begging for attention. When you click it a message appears stating that your IT administrator is requesting control of your device for a remote assistance session. Click on this message.<\/p>\n

\"\"<\/a><\/p>\n

On the endpoint the teamviewer site is opened and Quicksupport is downloaded. When you run it on the endpoint the remote session is automatically initiated.<\/p>\n

\"\"<\/a><\/p>\n

So it takes a bit of configuration but it’s a nice addition to Intune. Hope this helps someone.<\/p>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

Microsoft advices to use Teamviewer as the tool for remote assistance when using Azure Intune for managing endpoint devices. The setup process is fairly simple and you can use a trial subscription from Teamviewer for …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[25],"tags":[],"class_list":["post-197","post","type-post","status-publish","format-standard","hentry","category-intune"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_shortlink":"https:\/\/wp.me\/p59CpB-3b","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/www.gerjon.com\/index.php?rest_route=\/wp\/v2\/posts\/197","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.gerjon.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.gerjon.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.gerjon.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.gerjon.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=197"}],"version-history":[{"count":0,"href":"https:\/\/www.gerjon.com\/index.php?rest_route=\/wp\/v2\/posts\/197\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.gerjon.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=197"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.gerjon.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=197"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.gerjon.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=197"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}