TeamViewer deployment issues: Accessibility Permissions

[kcsantos]

We have TeamViewer deployed throughout our company via auto installing Policy from Jamf. Ever since the upgrade to Mojave, new installs of the TeamViewer host package get a prompt to grant accessibility permissions, which require Admin credentials. Our employees have local Standard User accounts, so they are not able to grant the permission.

We packaged up the TeamViewer installer via Composer, and even recorded the Permissions granting part after we received the prompt. Folder Permission set to:

Owner: root(0)
Group: wheel(0)
Mode 775

From Composer, created as a DMG and uploaded to Jamf. Download+Install initiated by Jamf Self Service policy.

Anyone know a workaround on how to get the Mac to grant access to TeamViewer automatically?

[sshort]

@kcsantos If the Macs are on Mojave you can use a PPPC profile to whitelist this so your users won't have approval issues. Check out the one I made.

[kcsantos]

I created a PPPC profile via the PPPC Utility. Here are my settings I have enabled for TeamViewer. Am I doing something wrong?

I did the same for the TeamViewer_Desktop

[kcsantos]

Ugggh... super noob mistake. I figured it out. I needed to do the settings posted in the previous picture for both TeamViewerHost and TeamViewer_Desktop. I initially assumed the settings carried to everything in that list automatically.

But it's working now. For those who are reading, just note the applications don't appear in the System Preferences>Security and Privacy>Accessibility screen after the profile allows it to go through.

[thenikkiwhite]

Heya... did you ever get this to work appropriately? I have been trying to use PPPC with TeamViewer and no matter what, I can't get it to work. I called TeamViewer and they said this isn't possible... you have to approve it on every machine manually.

[scottb]

@thenikkiwhite - did you try what @sshort posted above?

[thenikkiwhite]

yes, i tried it. it did not work for me... not sure if it matters but we are running the tensor version and not the QS version.

[SureExclamation]

@kcsantos

How do you add"TeamViewer_Desktop" ? I only see the TeamViewer host app itself when I look through everything.

I found the location, but no way to navigate to it.
/Applications/TeamViewer.app/Contents/Helpers/TeamViewer_Desktop

EDIT: Disregard, I was able to drag it in.

[llitz123]

Is there any way to just add user access to the Privacy tab in Security & Privacy pref pane? Or even just the Accessibility selection?
It would be great if JAMF could add as a configuration profile item. Not seeing the white-listed apps in the Accessibility section may be a deal breaker for me with this one...
Thanks for any help.

[alexmcclements]

One option we are looking at is using the Privileges app, the user can grant themselves temporary admin rights and make changes to privacy etc.

[DirkM2012]

Did anybody figure out how to approve Screen Capture (Screen Recording)? The PPPC Utility and JSS only show Deny (no Allow), is this by design from Apple or is JSS 10.15.1 and the PPPC Utility not ready yet for this option on macOS 10.15.1?

[mlavine]

@dmatth01 Correct, you can only Deny access to Screen Capture (Screen Recording) by design. Apple decided it fell into the same category as Camera and Microphone access where the user has to be the one to allow it. It seems our choice is to either touch each machine individually or educate our users on following the prompts to enable TeamViewer for Screen Recording.

[jameson]

Is there really no other way to enable this "screen capture" in teamviewer. Privacy is fine, but in enterprise we need support tools working and not using 5 minutes to guide users to find the checkmark

[rossw88]

I'm in the same boat. Seems like it's pointless creating the profile in the first place if you can only whitelist the "Accessibility" section but not the "Screen Recording" section.

[rwp16]

Yeah this is crazy. Our users don't have Admin Rights so IT will have to touch every machine.

[qdelaunay]

Hi,
My last communication with TeamViewer support gave me this : - to put it in context I just asked to be able to hide this pop-up (for Catalina), and the day we would have to activate screen recording our users would be able to do it

Thank you very much for sending us these Feature Requests. I will forward your suggestion to our product management. Such ideas are always welcome, although I can not promise when or if this Feature will be implemented, as the decision is based on public demand. Nevertheless, your feedback is very important to us as we want to continue to develop TeamViewer based on our user's needs and demands. If you have any further questions on our product, please feel free to contact us.