I was wondering if TeamViewer uses certificate pinning so I tried to decrypt it. I've set a simple decrypt rule to decrypt everything from one IP going to internet. But the rule doesn't seem to work for TeamViewer. All SSL sessions are decrypted but teamviewer-base isn't. I've also tried sharing file over it and I didn't see it in data log, also application didn't change to teamviewer-sharing. So I'm pretty sure TeamViewer didn't get decrypted while other SSL sessions did.
It does not show in the Startup Applications so I am guessing it is either hidden in the Startup applications or it is loaded by an option in a configuration file. I want to remove this automatic way of loading into memory so that it only works when I actually use teamviewer and not every time I boot the computer.
I've had this problem just now, and solved it by changing the option "[int32] Always_Online" to "0" in the file /etc/teamviewer/global.conf. Basically, what you should is to access this file with sudo privileges, and change this line:
I have a problem with my TeamViewer Installation script.
The download and installation part works great, but the assignment isnt working reliable.
I have followed the steps from here: -mass-deployment-on-macos
I have tried some additional things with my script, all without success:
- I have added some logic to wait with the assignment until the TeamViewer host service is running
- I found this doc article which uses a different syntax for the assignment helper:
Update:
I have asked the TeamViewer support about this and it looks like you have to sperate the installation and assignment.
According to TeamViewer there is no known way to combine the installation and assignment in one script.
But i did some digging with composer and found a plist which can be used to determine whether the assignment has run, and to which account the app is assigned.
Here is a Extension attribute which returns the same values you can see under "Account Assignment" in the teamviewer preferences.
I realize this is an older thread, not sure if anyone is still watching... I'm having assignment issues using multiple variations of the scripts in this thread. The issues so far are only with Big Sur (this is all I've tested so far). The script runs perfectly when I run it directly on the target machine, but it fails to assign when I run it through my RMM tool. I'm considering trying to run it from Jamf, but want to make sure it's not an OS issue first...
The one call out which I do not believe is called out here is the account assignment and might be the problem. If you look at @ryan.ball post he is running the account assignment up to 5 times until it's complete with a short 5-second pause before it attempts it. The reason for this is the TeamViewer services need to be started and if you try before that it won't work. If you don't have a sleep period long enough(I personally use 60 seconds) or have a retry statement the account assignment will fail. You can read more about some of that here - Teamviewer Account Assignment
Thanks @Levi_ and @ryan.ball . I'm really scratching my head with this one, as I have a bunch of endpoints that have had TV Host on them for some time now (months), so clearly the service is running. Or maybe it's not... I'll try to leverage pieces of the script on the page above to check for the service running and go from there.
I ended up with this assignment script.
This runs as a second policy after the teamviewer installation.
In addition to this i have created a smart group for the clients where the assignment did not completed yet. (The extension attribute used for this is a few posts up). The assignment script is scoped to this smart group and runs daily.
This has worked for the most clients, but unfortunately not for those clients with a different custom host installed and assigned to a different account. In this case, the existing assignment was removed, but i found no way to assign them to the new account without removing the existing client first and installing the new custom client.
To close the loop on this, I spent a fair amount of time on the phone with TeamViewer support and came up with the script below. Seems to work consistently. FYI, I install this using my RMM tool instead of Jamf, so there might be some extra code that's not relevant to Jamf. Many thanks to all those who posted answers previously...
This may be a bit of a dead thread but I got the TeamViewer install and assignment working and I'm super happy about it. I thought I'd share it here for others if they need. It may not be the cleanest or "proper" in all aspects. But it works!
@julienvs I note that you have "TeamViewerHost.app" without spaces in the filename, whereas "TeamViewer Host.app" is how it presents in my /Applications. Does the script function with this loss of the in the filename?
Jamf's purpose is to simplify work by helping organizations manage and secure an Apple experience that end users love and organizations trust. Jamf is the only company in the world that provides a complete management and security solution for an Apple-first environment that is enterprise secure, consumer simple and protects personal privacy. Learn about Jamf.
This site contains User Content submitted by Jamf Nation community members. Jamf does not review User Content submitted by members or other third parties before it is posted. All content on Jamf Nation is for informational purposes only. Information and posts may be out of date when you view them. Jamf is not responsible for, nor assumes any liability for any User Content or other third-party content appearing on Jamf Nation.
We have TeamViewer deployed throughout our company via auto installing Policy from Jamf. Ever since the upgrade to Mojave, new installs of the TeamViewer host package get a prompt to grant accessibility permissions, which require Admin credentials. Our employees have local Standard User accounts, so they are not able to grant the permission.
Ugggh... super noob mistake. I figured it out. I needed to do the settings posted in the previous picture for both TeamViewerHost and TeamViewer_Desktop. I initially assumed the settings carried to everything in that list automatically.
But it's working now. For those who are reading, just note the applications don't appear in the System Preferences>Security and Privacy>Accessibility screen after the profile allows it to go through.
Heya... did you ever get this to work appropriately? I have been trying to use PPPC with TeamViewer and no matter what, I can't get it to work. I called TeamViewer and they said this isn't possible... you have to approve it on every machine manually.
Is there any way to just add user access to the Privacy tab in Security & Privacy pref pane? Or even just the Accessibility selection?
It would be great if JAMF could add as a configuration profile item. Not seeing the white-listed apps in the Accessibility section may be a deal breaker for me with this one...
Thanks for any help.
Did anybody figure out how to approve Screen Capture (Screen Recording)? The PPPC Utility and JSS only show Deny (no Allow), is this by design from Apple or is JSS 10.15.1 and the PPPC Utility not ready yet for this option on macOS 10.15.1?
@dmatth01 Correct, you can only Deny access to Screen Capture (Screen Recording) by design. Apple decided it fell into the same category as Camera and Microphone access where the user has to be the one to allow it. It seems our choice is to either touch each machine individually or educate our users on following the prompts to enable TeamViewer for Screen Recording.
Is there really no other way to enable this "screen capture" in teamviewer. Privacy is fine, but in enterprise we need support tools working and not using 5 minutes to guide users to find the checkmark
Hi,
My last communication with TeamViewer support gave me this : - to put it in context I just asked to be able to hide this pop-up (for Catalina), and the day we would have to activate screen recording our users would be able to do it
If you make use of Windows RDP or Remmina, you normally use the IP (public) or attached hostname of the server to log on. I was wondering how a remote program like Team Viewer works? And also, how does the program know how to route that traffic over the internet?
For example, LogMeIn is a program similar to TeamViewer where you are able to remotely login to a computer outside of the network that you're currently on. You will notice that there are no external configurations required for this type of remote session. This is due to the fact that the software that you installed on the remote machine (the LogMeIn client) initiates an outgoing request to the LogMeIn servers. Since this client initiated the request, no port forwarding on the Firewall is required.
On your computer, outside of the network of the LogMeIn computer, can access this computer remotely through LogMeIn's website. This website accepts the initiated request from the remote computer and keeps the connection alive to listen for a remote session request.
When you run TeamViewer, you are assigned an ID on their broker server. You make a connection to a Teamviewer ID, and TeamViewer passes the connection down through the TeamViewer client's established tunnel to the destination and you then you are prompted for password and then the connection establishes afterwards.
7fc3f7cf58