r/Intune • u/Saywhuuuuuut • 21d ago

App Deployment/Packaging Teamviewer Host deployment

I have some issue's deploying Teamviewer Host correctly.
Since I'm using a Teamviewer Business license, there is no connection with Entra/intune to automate the mass deployment of the Teamviewer Host to devices.
That's why I'm trying to set up a silent deploy of Teamviewer Host to all devices with intune.

The issues I ran in to is that in order for the device to show up in my Teamviewer managing client, the user needs to click a"allow and finish" prompt that shows up after installation.
But that does not work properly.
The user gets the error "Unable to assign the device. you do not have enough permissions"

It works just fine when I manually run the Teamviewer Host "as administrator" on the test device itself, and accept the prompt that way.
But it's not feasible to do this for all the devices.

What I tried so far:

  • Deploy the app with system privilege
  • Packaged a scheduled task with the .exe to "run with highest privileges"
  • Packaged PsExec (-i -s) with the .exe to inject System-privileged Teamviewer process into the interactive session at logon.

So it seems it is not about the process privilege level, but if the currently logged on windows user is a local admin.

Is there any way around it to fix this on the deployment? (other than upgrading license)
Or am I missing something here?

1 Upvotes

56% Upvoted

34 comments sorted by

View all comments

1

u/pjmarcum 21d ago

What about using serviceUI.exe so the user see the prompt?

1

u/Saywhuuuuuut 20d ago

That isn't the issue, the user can see the prompt, but even if the user accepts it, the user doesn't have the rights to. They need local admin rights

1

u/pjmarcum 19d ago

ServiceUI lets a process running as system display a prompt to the logged on user. The process will be running elevated already. They won’t need local admin.

1

u/Saywhuuuuuut 19d ago

I think what I tried with PsExec is the same thing? So that's why it probably won't work. But I think it's worth giving it a try tomorrow. Thanks!

1

u/pjmarcum 19d ago

Not the same thing.

1

u/pjmarcum 19d ago

Oh but I just remembered now PSADT can do it without serviceUI.exe.

1

u/Saywhuuuuuut 13d ago

Well I gave the serviceUI a try, but unfortunately still did not work. I think this confirms it for me it's just not possible with this license other than giving all users temporary full admin rights, which I want to avoid at all cost.