How to disable and add exceptions to the Software Restriction Policies for TeamViewer in Windows 10

Instruments with Windows 10 OS have the Software Restriction Policies (SRP) Windows feature enabled by default. This security feature blocks programs that are not specifically on the SRP exceptions list. When using TeamViewer QS, an exception must be added to SRP to allow TeamViewer QS to launch properly.

How to disable SRP

1. Confirm that a sequencing run is not in progress because this process could interrupt the run.

2. Log in to the system with the sbsadmin local account (see Note 1 below).

3. Open Windows File Explorer and navigate to the C:\Illumina\Security folder.

4. Double-click Disable.reg and acknowledge the prompts.

5. To reenable SRP, double-click Enable.reg and acknowledge the prompts.

Note 1: For NovaSeq 6000 with serial numbers smaller than A01535, the sbsuser account is part of the Administrators group so no need to switch accounts.

How to add exceptions for TeamViewer to SRP

1. Confirm that a sequencing run is not in progress because this process could interrupt the run.

2. Log in to the system with sbsadmin local account (see Note 2 below).

3. Disable SRP by navigating to C:\Illumina\Security, double-clicking Disable.reg, then acknowledge the prompts.

4. In the Windows search bar, type in secpol and open the Desktop App.

5. In the Local Security Policy dialog box, expand Software Restriction Policies, then select Additional Rules.

6. To add a rule:

   1. On the Action menu, select New Path Rule….

   2. In the Path field, enter the certificate, file name, file extension, or directory that you want to allow.

   3. In the Security level list, select Unrestricted.

   4. [Optional] In the Description field, enter a reason for creating the rule.

   5. Select OK to add the rule.

7. Separately add the following rules according to the previous instructions for both of the following paths:

   1. TeamViewerQS*.exe

   2. C:\Users\\AppData\Local\Temp\TeamViewer\

8. Close the Local Security Policy dialogue box.

9. Reenable SRP by navigating to C:\Illumina\Security, double-click Enable.reg, then acknowledge the prompts.

10. Sign out of sbsadmin account and then sign back in as sbsuser for the settings to take effect.

Note 2: For NovaSeq 6000 with serial numbers smaller than A01535, the sbsuser account is part of the Administrators group so no need to switch accounts.

Figure 1. Double-click Disable.reg to disable SRP.

Figure 2. Select Yes to acknowledge the prompt.

Figure 3. Select OK to acknowledge the prompt.

Figure 4. Open Local Security Policy to add exceptions for TeamViewer to SRP.

Figure 5. Expand Software Restriction Policies and then select Additional Rules.

Figure 6. Select Action and then select New Path Rule...

Figure 7. Under Path select TeamViewerQS.exe and in the Security level select Unrestricted.

For any feedback or questions regarding this article (Illumina Knowledge Article #6523), contact Illumina Technical Support [e-mail].