The TeamViewer deployment and configuration guide

Modified on Tue, 5 Nov at 10:35 AM

The TeamViewer deployment and configuration guide

Welcome to our comprehensive guide for administrators. This guide is made for TeamViewer license administrators who have recently acquired a multi-user TeamViewer license (Premium, Corporate, or Tensor). In this guide, we outline our recommended best practices for optimally configuring your TeamViewer environment. While there are various ways to set up TeamViewer, the methods described here reflect some best practices acquired by our Professional Service teams.

If you are interested in our Professional Services, you can find an overview in the Documents section at https://compliance.teamviewer.com/.

Overview of the TeamViewer deployment and configuration steps

Step 1: How to activate your license and set up your company

General information about TeamViewer

Please find below general information about TeamViewer solutions and their capabilities.

To successfully deploy and configure TeamViewer within your environment, please make sure that your network allows TeamViewer websites and services.

Learn more here: Network addresses and ports used by TeamViewer

Note: If you are a Tensor license holder and purchased the Conditional Access add-on, please make sure to set up your network environment, as described here:
Best practices for network configuration in a Conditional Access environment

Activating the license is a crucial step for a successful TeamViewer onboarding.

Please click the link below and follow the activation guide corresponding to your TeamViewer license:

Activate your TeamViewer license

Note: When migrating licenses from other TeamViewer versions (e.g.: Business, Corporate) during working hours, make sure you quickly reassign the new licenses to agents, to avoid operational interruptions.

Once you have activated your account, you can find detailed information about the TeamViewer account here: Account

The web app is the new central platform for managing your devices, users, and company profile, essentially containing all administrative functions.

You can also make outgoing connections from the web app.

You can access the web app via this link:

Access the web app

Learn how to sign into your account here: Sign in with your account

If you are using the (Classic) interface, you'll have to use the Management Console to manage your devices and your users. You can access the Management Console via this link: https://login.teamviewer.com/

Learn how to create your company here:

Create a company

Learn how to manage your users here:

Add users to your company

To learn how to automatically provision your company with users and user groups from your Identity Provider (IdP), please go to the chapter below:

Automate users and groups (SCIM) provisioning via connectors

Step 2: How to use TeamViewer securely

Please find our best practices on how to use TeamViewer securely within your environment here:

Security Handbook

User roles define what TeamViewer-related services each supporter (user) is allowed to view, edit, and control. Learn how to create roles here:

Roles

Policies offer the ability to apply settings on your installed TeamViewer full or TeamViewer Hosts clients, allowing granular control over which configuration settings are applied to specific groups of devices.

Learn how to improve security via TeamViewer policies here:

Create and assign policies

Furthermore, you'll find the list of all settings policies as well as our best practices on how which settings to choose for our policies here:

Policy settings

Best practices for settings policies

Note: TeamViewer policies can be assigned to devices and device groups.

Now you have set up your TeamViewer policies, you can create device groups and assign your TeamViewer policies to those groups. Learn how to create a device group.

For more information about device groups, please read this article.

Now, assign managers to your devices and device groups and define their permissions.

Learn more here:

Incoming and outgoing connections from users within your company and to your managed devices can be logged in the Admin settings within Connection reports.

Learn more here: Connection reports

On top of this, you can also use the Auditability feature (only available for TeamViewer Tensor), which provides complete visibility into user activity, records remote sessions, and sets user policies, ensuring accountability and compliance with security protocols and internal requirements.

Learn more here: Auditability / Event Log

Note: Supporters who are authorized to view event logs should have the View event logs role permission added, as it is not enabled by default.

TeamViewer Conditional Access is a security solution that allows you to granularly control which source users, user groups, and devices using TeamViewer Tensor have access to which TeamViewer clients in your organization.

Learn more here: TeamViewer Conditional Access

Step 3: Authentication and provisioning

With Single Sign-On, reduce user management efforts for large companies by connecting TeamViewer with identity providers and user directories, thereby enhancing control over provisioning enterprise user accounts and improving security by centralizing password control.

Please learn more here: Single Sign-On (SSO)

Notes:

Single Sign-On is only available for TeamViewer Tensor licenses.
Before validating the SSO domain, ensure that all supporter accounts and groups are added to the IdP SSO connector. End-user accounts should not be added, as their devices will be managed within device groups.
Once SSO is enabled for the e-mail domain, all accounts associated with that e-mail domain will be redirected to the SSO, regardless of whether they belong to your company profile or not. You can apply granular exclusions if needed (only supporter accounts are added).

With SCIM (System for Cross-domain Identity Management), it is possible to synchronize users and user groups from many different Identity Providers (IdP), such as Okta and Microsoft Entra ID (formerly Azure Active Directory) to TeamViewer

Learn how to proceed here:

Notes:

Be mindful of the distinction between “deleting an account” and “removing a user” from the company.
Make sure to structure your user groups in your IdP so it reflects your environment to facilitate automation.

Enhance security by requiring users to use multi-factor authentication when signing in to their TeamViewer account and thereby reducing the risk of unauthorized access.

Learn more here: Two-factor authentication for your account

Hint: You also can enforce two-factor authentication for all your company users when they sign in to TeamViewer.

Learn more here: Enforce two-factor authentication for your company members

Step 4: How to integrate TeamViewer into your environmen

Provide attended remote support via session codes

Learn how to provide attended remote support here:

Provide attended remote support

To go beyond, you can use the Service Queue feature, allowing your team to manage spontaneous customer support requests, each represented as a service case, and enabling individual team members to address these cases via TeamViewer.

Learn more here: Service Queue

Enhance your TeamViewer experience with our licensed add-ons.

Remote Management

Get Started with TeamViewer Remote Management

Endpoint Protection

Monitoring & Asset Management (Classic)

Asset Management

Mobile Device Management

Service Desk

Enhance support request management with Service Desk.

Learn more here: Service Desk

Workflow and Automation

Discover AI-powered functionalities to streamline workflows and processes.

Learn more here:

Rule-based task automation (Monitoring add-on required)

Generate session summaries with Session Insights

Co-browsing

Provide support with Co-browsing

Activate, enable and configure Co-browsing

Bring TeamViewer into your Microsoft Teams experience to facilitate remote control, assistance, device sharing, and session monitoring for supporters and end users.

Learn more here: Microsoft Teams Integration - Installation and User Guide

Please find here all integration user guides for the platforms we support:

3rd party Integrations

TeamViewer's web-based API enables data access, account control, and the development of apps integrating TeamViewer functionality for both corporate and public use.

Please find all our documentation regarding REST APIs here:

Use the TeamViewer API

TeamViewer API documentation

GitHub - teamviewer/api-example-scripts: TeamViewer Web API example scripts

TeamViewer API interface

Remote Access API Integration Guide

With the TeamViewer Mobile Software Development Kit (SDK) you can integrate TeamViewer remote access and remote control functionalities into your mobile apps to optimize your company's customer support services.

Learn more here: TeamViewer Mobile Software Development Kit (SDK)

Step 5: How to deploy TeamViewer within your environment

To deploy TeamViewer clients within your environment, please follow this user guide:

TeamViewer deployment guide

Note: The user performing the rollout setup will be designated as the device manager (owner). Device managers have the authority to configure all settings related to a specific device, including tasks such as moving the device between device groups and unassigning devices. This ownership is established during the assignment process (and can also be added afterward). Therefore, we recommend assigning multiple users as the device manager (owner).

You can mass deploy TeamViewer clients via MDM tools such as Microsoft Endpoint Manager (InTune), JAMF Pro, IBM Maas360 and many others.

Microsoft Endpoint Manager (InTune)

Deploy TeamViewer on device groups via Microsoft Endpoint Manager

Intune Integration - Installation and User Guide

JAMF Pro

Mass deployment on macOS

TeamViewer Integration - Jamf Pro Documentation

GitHub - jamf/PPPC-Utility: Privacy Preferences Policy Control (PPPC) Utility

Note: If the device is not appearing in your devices list, it might could be because the assignment command in the script runs before the TeamViewer client establishes a connection to the TeamViewer cloud. This issue can occur if your firewall blocks outgoing traffic to TeamViewer routers. To address this, consider adding or increasing the wait time in the mass deployment script.

TeamViewer Mobile Device Support allows you to connect to mobile devices.

Please learn more here:

Remote control an Android device via attended access

Remote control an Android device via unattended access

Share the screen on your iPad/iPhone

You can also configure apps via your Mobile Device Management tool.

Learn more here:

Configure Android Apps with MDM

Configure iOS Apps with MDM

Need assistance? Connect with our Support Team

Join the conversation in our TeamViewer Community!

Thousands of TeamViewer enthusiasts share solutions, tips, and tricks and help each other every day.

Join the TeamViewer Community now!

TeamViewer maintains a status page to keep you updated about its system’s availability. You can visit this page to check if there are any service interruptions or other issues: TeamViewer Status

To contact our Customer Support, please click this link:

Contact Support

Scroll down and click Submit a request.

Alternatively, you can also call us at the number corresponding to your location.

SLA Contracts

TeamViewer Tensor SLA is designed with large companies that operate across the globe in mind and beyond normal business hours. The main purpose of SLA is twofold to provide support to TeamViewer Tensor customers:

With the highest priority degree
around the clock

If you have already subscribed to an SLA contract, the people indicated in it can open requests in the informed exclusive support channels.

For general information about SLA contracts, please click here.

If you are interested in an SLA contract, please contact our Sales team.

Customer Success Management

If you have already subscribed to a CSM, please reach out via the indicated contacts for further information.

If you are interested in getting an assigned CSM, please contact our Sales team.

The TeamViewer deployment and configuration guide