Fully Connected!

I've been waiting some time to see this in action since Intune without Remote Control of devices is a hard sell in the Enterprise space. News of the connector for Intune and Teamviewer surfaced in July and then dis-appeared again. Now it's released and I have to say, it ain't half bad. See the Teamviewer Site for more info on the release.

On a baic level, to get things working I installed the TeamViewer 11 Desktop client on the target machine (you can download it here).  This is required since the Intune agent calls the TeamViewer agent via Edge or IE11 to establish a session.  Once installed, there's some work to do with the connector to get started.


Now Remotely Possible...

Setting up the connector

1) Connector setup

The connector requires you to have a TeamViewer account to continue setup.  An account can be provisioned by going to the Windows store and downloading the TeamViewer app for windows 10.  After installation, sign into the account and check out the remote control app.  This will allow you to initiate remote control sessions from the PC that is running the Intune Management console and connects with the intune admin service to relay communications.

2) Sign-up and authorise devices with Teamviewer

Accepting the terms of the agreement will take you to the Teamviewer sign in portal.  You'll need the account details you set up a little earlier to use for the connector - hit sign in once you've entered these details.  There will be one or more emails to that account whcih will ask you to register the device used with the TeamViewer service under the account.  Accept the authorisations and contine through.

Once applied the Teamviewer web services will recognise the device for use as a remote control partner.

Sign in to Teamviewer

Intune to Teamviewer connector complete.

3) All done!

Once the connector is set up, the Intune Admin console (after a refresh) will show that the connector is complete.  Now you are ready to receive Remote Assistance requests from PCs that have the TeamViewer Desktop client installed and are also enrolled in your tenant for Intune Agent-based management.  The remote control features are pretty much on a par with those I've used with the SCCM remote control agent, but a little more up to date and with additional features too.

4) Viewing Remote Assistance requests

With Windows 10 build 1607 (aka Anniversary edition) and TeamViewer client installed, the 'Request Remote assistance' funciton in the Intune centre is now enabled.  This means that any requests made here are sent to the Intune Tenant and show up as alerts for support staff to service.  The level of alerts is set to 'Critical', however these can be configured to be informational or warnings if required.  At the time of testing, the alerts will not automatically close after a connection has been completed.  This may be a good or a bad thing for you, but I'm sure it will be included as an option in future revisions.

Also, it's worth considering adding notifications for the Remote Assistance alerts in the Intune Admin section so that these can be emailed to support teams or an automatic email-ticketing system.

Remote Assistance Alerts (click to enlarge)

Access Request Pending

5) Accepting the request and connecting

In the lower pane of the Alert window for the assistance request is a lik to connect to the session.  Once clicked, the intune console launches a window to confirm the connection request and the name of the user requesting the session.  Once accepted, the TeamViewer remote control app on the host (Intune Console PC) is lanuched and the connection details passed to the client.

Once the session is initiated, the TeamViewer session will wait for user interaction from the client requesting remote assistance, bypassing the usual swap of Partner IDs between host and endpoint.  This makes securing remote sessions much easier.  The client experience 'caller' and 'receiver' is shown below.

'Caller' experience waiting for connection

'Receive' Connection pending confirmation

The Bottom Line

Finally, there's a joined-up solution for Remote Control via Intune for Windows 10 PCs.  There are a few improvements to be made, especially with the handling of Alerts, but that's just a general comment for Intune in the enterprise space.  It's impressive to see what Microsoft and TeamViewer have done in a short time to get this solution out.  I'm already piloting this for one of our key customers and they seem impressed with its usability and simplicity.

Until next time.