Use TeamViewer to remotely administer Intune devices
Devices managed by Intune can be administered remotely using TeamViewer. TeamViewer is a partner program that you purchase separately. This article shows you how to configure TeamViewer within Intune, and how to remotely administer a device.
This feature applies to:
- Android device administrator (DA)
- Android Enterprise personally owned devices with a work profile (BYOD)
- iOS/iPadOS
- macOS
- Windows
Important
Microsoft Intune is ending support for Android device administrator management on devices with access to Google Mobile Services (GMS) on December 31, 2024. After that date, device enrollment, technical support, bug fixes, and security fixes will be unavailable. If you currently use device administrator management, we recommend switching to another Android management option in Intune before support ends. For more information, see Ending support for Android device administrator on GMS devices.
Prerequisites
The administrator configuring the TeamViewer connector must have an Intune license. You can give administrators access to Microsoft Intune without them requiring an Intune license. For more information, see Unlicensed admins.
Only a Global administrator or Intune administrator in the Intune admin center can onboard TeamViewer.
Use a supported Intune-managed device:
- Android device administrator (DA)
- Android Enterprise personally owned devices with a work profile (BYOD)
- iOS/iPadOS
- macOS
- Windows
Note
- Android Enterprise corporate-owned devices are not supported. Team viewer works with the Company portal app. It doesn't work with the Intune app.
- TeamViewer may not support Windows Holographic (HoloLens), Windows Team (Surface Hub), or Windows 10 S. For supportability, see TeamViewer (opens TeamViewer's web site) for any updates.
A TeamViewer (opens TeamViewer's web site) account with the sign-in credentials. Only some TeamViewer licenses support integration with Intune. For specific TeamViewer needs, see TeamViewer Integration Partner: Microsoft Intune.
By using TeamViewer, you're allowing the TeamViewer for Intune Connector to create TeamViewer sessions, read Active Directory data, and save the TeamViewer account access token.
Note
- TeamViewer is not supported on GCC High environments.
Configure the TeamViewer connector
To provide remote assistance to devices, configure the Intune TeamViewer connector using the following steps:
- Sign in to the Microsoft Intune admin center.
- Select Tenant administration > Connectors and tokens > TeamViewer Connector.
- Select Connect, and accept the license agreement.
- Select Log in to TeamViewer to authorize.
- A web page opens to the TeamViewer site. Enter your TeamViewer license credentials, and then Sign In.
Remotely administer a device
After the connector is configured, you're ready to remotely administer a device.
- In the Microsoft Intune admin center.
- Select Devices > All devices.
- From the list, select the device that you want to remotely administer > New Remote Assistance Session. Select the three dots (...) to see this option.
- After Intune connects to the TeamViewer service, you'll see some information about the device. Connect to start the remote session.
In TeamViewer, you can complete a range of actions on the device, including taking control of the device. For full details of what you can do, see the TeamViewer community page (opens TeamViewer's web site).
When finished, close the TeamViewer window.
End user experience
When you start a remote session, users see a notification flag on the Company Portal app icon on their device. A notification also appears when the app opens. Users can then accept the remote assistance request.
Note
Windows devices that are enrolled using "userless" methods, such as Device Enrollment Manager (DEM) and Windows Configuration Designer (WCD), don't show the TeamViewer notification in the Company Portal app. In these scenarios, it's recommended to use the TeamViewer portal to generate the session.