TeamViewer Remote policies allow your company to manage and affect TeamViewer Remote endpoints remotely by enabling and enforcing TeamViewer settings on the device. After assigning the policy to your devices, all the settings you have added to the policy will be applied to your devices.
Note: Options that are not defined in the policy keep the value of the locally defined settings.
This article applies to all TeamViewer Remote license holders.
When adding TeamViewer Remote settings to a policy, you must first enable or disable the setting. This affects the setting by default, but the local user can change the setting at a later time. Enforcing a policy setting prevents a user on the endpoint from altering the specific setting. When enforced, the setting will be visible in the local TeamViewer Remote options but will be greyed out and inaccessible.
To enforce a policy setting, simply slide the switch for enforcement to the right for the desired setting.
The following settings are available in TeamViewer Remote Policies. Please note that some options may only be available for Windows-based devices:
When activated, only accounts you have connected with or that are accounts in your contacts list are allowed.
Controls the level of access a supporter has when connected to the specific remote device. Access Control (incoming connections) not only refers to the ability to control or simply view the device when connected, but also the ability to use TeamViewer Remote features such as File Transfer, VPN, or Remote Printing.
Note: If a supporter is connected to a device with View only access, a large blue cursor will appear on the screen when they click an area. This cursor is visible to the user in front of the machine and can be used to direct them to a desired location.
Hint: If you wish to disable access to specific features only, use a Custom Setting.
Note: When set to deny all incoming connections, no prompt for a connection is shown on the remote machine. Connections are automatically declined.
Controls the level of access in when attending or hosting a meeting. Not only allows for the ability to Host or join a meeting, but also access to features such as Controlling remote machines, recording meetings, and file sharing.
Similar to Access Control (incoming connections), the main difference is that this affects connections made from the specific device instead of to it. Access Control (outgoing connections) not only refers to the ability to control or simply view a remote device in a connection, but also the ability to use TeamViewer Remote features such as File Transfer, VPN, or Remote Printing.
All meetings hosted on the device are automatically recorded.
Screen sharing of the Host's device begins automatically when the first participant joins the meeting.
When a connection is made to the device, the local TeamViewer Panel will minimize after 10 seconds.
Hint: The user on the remote machine can bring up the local TeamViewer panel by clicking the tab on the side of their screen.
[image of tab]
When a supporter connects to the remote device, a TeamViewer security image will appear locally indicating that a remote session is in progress. This prevents local users from seeing the screen.
Note: Activating the black screen automatically disables local controls on the device. However, users can regain control in emergencies by pressing Ctrl-Alt-Del on the local device.
Learn More about Custom black screens
Sets up access for which TeamViewer accounts/IDs can connect to the device.
Learn More about Block and Allowlists
Note: This feature is available only for Windows OS users
When activated, any change to the TeamViewer Remote settings requires Admin-level privileges on the local device.
During a remote session, the chat functionality can be enabled or disabled.
Sets how often the device will automatically check for an available update to TeamViewer Remote. The following intervals are available:
Synchronizes the clipboards of the two devices in the connection. Allows any text copied on one machine to be available to the other.
Note: This feature is available only for Windows OS users
When the red X is clicked to close the app, TeamViewer Remote will only minimize to the system tray, and remain open. TeamViewer Remote can be shut down by right-clicking the icon in the system tray and selecting Exit TeamViewer.
Define conference call data for connections and meetings. The following options are available:
Note: This feature is available only for Windows OS users
Disables the ability to drag & drop files between devices in a connection. Other file transfer methods must be used.
Note: This feature is not yet available.
Disables the ability for the supporter to pause or stop recording TeamViewer sessions.
Note: This feature is available only for Windows OS users
Prevents TeamViewer Remote from being shut down completely on the device. Useful in cases where the continuous availability of the device is required.
Automatically enables the TeamViewer security screen when input on the device is disabled during a connection.
Enables logging for the remote device, ensuring TeamViewer Remote writes all events and errors to the log files.
Note: It is not currently possible to record incoming connections
Automatically records all outgoing connections from the device. Recordings are saved locally on the device. As this only affects outgoing connections, this setting does not pertain to Host module installations
Hint: At the end of the session the user will be prompted to select a save location for the file. We recommend setting a designated Session Recording Directory to avoid such prompts
Note: This feature is available only for Windows OS users
Provides connecting supporters Full Access when connecting to a device currently on the Windows login screen.
The following options are available individually in the TeamViewer Policy, and affect if certain aspects of the TeamViewer Remote client are visible on the machine. The following features,menu options, and tray options can be hidden:
Note: Connection requests can still be made to the device in this mode. The setting affects any Device list that contains the TeamViewer ID.
Designates if connections can be made from devices on the same Local Area Network (LAN) using the IP of the device instead of the ID.
Determines if new versions will be installed automatically. The following options are available:
Note: This setting only affects TeamViewer (Classic) devices. TeamViewer Remote is always on the latest major version.
Enables TeamViewer Remote to collect and log data about all incoming connections to a log file (Connections_incoming.txt).
Learn More about the Incoming Connections log file
Enables TeamViewer Remote to collect and log data about all outgoing connections to a log file.
Note: This option must be activated whenever you are using the TeamViewer Manager.
Designates the default custom meeting invitation. The following parameters are available:
Note: Clicking a placeholder from the drop-down adds the information to the Invitation when it sends. In the setup, however, you will only see the placeholder itself (i.e. @@URLMID@@)
Note: This creates a default invitation message; we recommend using only placeholders for specific meeting info and adding general information for all meetings in this default invitation.
Gives the administrators the ability to define which interface is used on managed devices.
When a connection is made to a new device while still connected to the first, the second connection opens in the same window but on a different tab. To have each session appear in a separate window, disable this option.
Excludes devices from usage data collection.
Note: In complying with the GDPR standards, TeamViewer does not collect any user-identifiable or private data for our analytics.
Designates the level of access participants to a TeamViewer meeting have. This includes the use of audio and video, chat, file transfer, and interactions with the host machine. The following levels are available:
Note: The meeting functions can still be enabled by the Host for all participants on-demand when needed.
Designates a default password for all Instant (non-scheduled) meetings.
Note: Scheduled meetings allow for a password for each individually scheduled meeting. This only affects impromptu meetings started manually.
Determine how strong (complex) the random password for spontaneous access should be.
The following levels are possible:
Allows audio from the target device to the local device to be transmitted within the connection.
Prevents the local user from removing the Account Assignment in TeamViewer Remote. As many TeamViewer Remote services are linked to a TeamViewer account, this can prevent accidental removal of features like Remote Management.
Prevents users on the machine from enabling TFA for Connections in TeamViewer Remote.
Learn More about Two-Factor Authentications for connections
Two separate options determine the quality of connections for both Meetings and Remote control sessions.
The following quality levels are available:
For custom settings, the following options are possible:
Note: Improving application compatibility reduces performance
Note: This feature is only available for versions 13.1 and lower.
A QuickConnect button appears on all apps on the device, allowing for instant sharing of the app's current state via a TeamViewer connection.
Select how TeamViewer Remote generates a new temporary password for incoming sessions from the dropdown list. The following options are available:
Enables the ability to include participants' audio and video in TeamViewer Meeting recordings. Participants must decide whether they would like their webcam video and VoIP to be included in the recording.
Note: If deactivated, only the screen and webcam video/VoIP of the meeting host will be recorded.
Enables the ability to include participants' audio and video in TeamViewer Remote session recording. Partners must decide whether they would like their webcam video and VoIP to be included in the recording.
Note: If deactivated, only the screen and webcam video/VoIP of the supporter will be recorded.
Designates the default custom Remote control session invitation. The following parameters are available:
Note: Clicking a placeholder from the drop-down adds the information to the Invitation when it sends. In the setup, however, you will only see the placeholder itself (i.e. @@URL:QS@@)
Note: This creates a default invitation message; we recommend using only placeholders for specific Session info, and adding general information for all meetings in this default invitation.
Removes wallpaper on the desktop of the meeting host during meetings. Can help improve meeting quality on lower connections as this optimizes the connection speed since less data must be transmitted.
Removes wallpaper on the desktop of the remote device during TeamViewer Remote connections. Can help improve quality on lower connections as this optimizes the connection speed since less data must be transmitted.
Reports connections to this device in TeamViewer Remote and the Web Portal
Hint: For more information, see the manual for Management Console, section 11.2, "Device reports", page 93.
Key combinations on the local device are sent via TeamViewer Remote to the remote device. The key combinations do not affect the local device.
Determine a directory for all TeamViewer Meeting and Remote control recordings. Separate path can be entered for Windows and macOS devices.
Transmit computer sounds and audio from the presenter to all participants in TeamViewer meetings.
Two cursors appear during a remote connection, showing the local user as well as the connected supporter's actions.
Note: It is not currently possible to record incoming connections
Automatically starts the recording of all outgoing connections from the device. Recordings are saved locally on the device. As this only affects outgoing connections, this setting does not pertain to Host module installations
Hint: At the end of the session the user will be prompted to select a save location for the file. We recommend setting a designated Session Recording Directory to avoid such prompts
Note: This feature is available only for Windows OS users
Instructs TeamViewer to open with the operating system. Allows access to the device before a user is logged in locally.
Passwords used to connect are stored per the default settings to allow immediate reconnection. After the shutdown of TeamViewer Remote, the passwords are no longer saved.
Select a period after which an outgoing remote control session is automatically terminated if there is no interaction in the defined period. Can be set in hour increments from off to 8 hours of inactivity.
Define which TeamViewer version your clients should be running.
TeamViewer Remote will attempt to set up a fast UDP connection by default.
Hint: We recommend only disabling this feature if your connection is interrupted regularly.
Configure the settings for TeamViewer Wake-on-LAN, allowing users to connect to the computer even if it is switched off.
Note: This feature is available only for Windows OS users
Provides additional connection options in TeamViewer Remote, allowing connections to be made by inputting the local Windows credentials instead of the random password displayed. The following levels are provided:
Note: Ensure all Windows logins are secured using strong passwords.