TeamViewer Service

[xxx59712]

Hi,

I just wanted to ask a question related to security.

I see a TeamViewer service running in the back and set to start Automatic on my Windows 7 station. Could you confirm that even if that service is up and running,
it is still NOT possible to connect to my machine as long as the TeamViewer client is not running (i.e. Start TeamViewer with Windows is NOT ticked in Options).

Thanks.

[matt]

I believe that the service enables the 'unattended host', but it may actually be used by other components of Teamviewer.
It is possible for someone who knows the workstation ID and the password to connect, even if the TeamViewer client is NOT running.

I can remote into machines that have no user logged in, and am presented with the windows logon screen, if the machine has the Teamviewer Unattended Host set up.

To remove unattended access, you can simply

Extras >> Options >> Security  >> Personal Password >> (remove both)
Extras >> Options >> Advanced >> Random Password after each session >> set to 'Generate New'

This way there will be no saved (regular) password, and the one off password changes each time it is used.
No-one can connect without the password

[xxx59712]

Thanks. Really clear and precise answer.

Conclusion is that I will not let the service run in the back automatically, I will only start it up when I need it leaving it Disabled otherwise.

[Admin]

I believe that the service enables the 'unattended host', but it may actually be used by other components of Teamviewer.
It is possible for someone who knows the workstation ID and the password to connect, even if the TeamViewer client is NOT running.

I can remote into machines that have no user logged in, and am presented with the windows logon screen, if the machine has the Teamviewer Unattended Host set up.

Can you expand on how this is accomplished?

[xxx59712]

I agree with matt. When I log out of the station and try to connect on it using a remote TeamViewer client, I get access to the login screen too.

It is only when I am already logged in that TeamViewer client needs to be up and running to be able to connect.

[matt]

I believe that the service enables the 'unattended host', but it may actually be used by other components of Teamviewer.
It is possible for someone who knows the workstation ID and the password to connect, even if the TeamViewer client is NOT running.

I can remote into machines that have no user logged in, and am presented with the windows logon screen, if the machine has the Teamviewer Unattended Host set up.

Can you expand on how this is accomplished?

Sure.

I install the unattended host of Teamviewer on a client machine, (or the full version of Teamviewer, and then 'Connection >> Setup Unattended Access')
If I know the passsword, and the ID, I can always log on if the client computer is running. I can log on about the same time a local user could log on following a restart.

A way to test this is to set the client computer to start on the welcome screen (where you pick a user and optionally enter a password), and then when connected via teamviewer do a remote restart.

I actually customise the unattended host installer to include my company logo >> https://www.teamviewer.com/en/download/customdesign.aspx, and put the resultant file on my website for my customers to download. This way all new installs of 'my' host installer, automatically appear in my computers and contacts list...