How to disable and add exceptions to the Software Restriction Policies for TeamViewer in Windows 10

Background

Instruments with Windows 10 Operating System (OS) have the Software Restriction Policies (SRP) feature enabled by default. This security feature blocks programs that are not specifically on the SRP exceptions list. When using TeamViewer QuickSupport (QS), an exception must be added to SRP to allow TeamViewer QS to launch properly.

Resolution Actions

Disabling and Enabling SRP

1. Confirm that a sequencing run is not in progress and the instrument is idle.

2. Log in to the Windows OS using the sbsadmin local Administrator account.

   1. For NovaSeq 6000 with serial numbers smaller than A01535, the sbsuser account is part of the Administrators group.

3. Open Windows File Explorer and navigate to the C:\Illumina\Security folder (Figure 1).

4. Double-click Disable.reg and acknowledge the prompts (Figures 2, 3).

5. When finished, double-click Enable.reg and acknowledge the prompts to re-enable SRP.

Adding Exceptions for TeamViewer to SRP

1. Confirm that a sequencing run is not in progress and the instrument is idle.

2. Log in to the Windows OS using the sbsadmin local Administrator account.

   1. For NovaSeq 6000 with serial numbers smaller than A01535, the sbsuser account is part of the Administrators group.

3. Disable SRP by navigating to C:\Illumina\Security, double-clicking Disable.reg, then acknowledge the prompts (Figures 1-3).

4. In the Windows search bar, input secpol and open the Local Security Policy App (Figure 4).

5. In the Local Security Policy dialog box, expand Software Restriction Policies, then select Additional Rules (Figure 5).

6. To add a rule:

   1. On the Action menu, select New Path Rule….

   2. In the Path field, enter the certificate, file name, file extension, or directory that you want to allow.

   3. In the Security level list, select Unrestricted.

   4. [Optional] In the Description field, enter a reason for creating the rule.

   5. Select OK to add the rule.

7. Separately add the following rules using Steps 6a-e for both of the following paths (Figures 6, 7):

   1. TeamViewerQS*.exe

   2. C:\Users\\AppData\Local\Temp\TeamViewer\

8. Close the Local Security Policy application.

9. Reenable SRP by navigating to C:\Illumina\Security, double-click Enable.reg, then acknowledge the prompts.

10. Sign out of sbsadmin account and then sign back in as sbsuser for the settings to take effect.

Figure 1: Double-click Disable.reg to disable SRP.

Figure 2: Select Yes to acknowledge the prompt.

Figure 3: Select OK to acknowledge the prompt.

Figure 4: Open Local Security Policy to add exceptions for TeamViewer to SRP.

Figure 5: Expand Software Restriction Policies and then select Additional Rules.

Figure 6: Select Action and then select New Path Rule...

Figure 7: Input TeamViewerQS.exe in the Path free-text field and select Unrestricted in the Security Level drop-down menu, then select OK. Repeat these steps to add C:\Users\\AppData\Local\Temp\TeamViewer\ as a second Path Rule.

For any feedback or questions regarding this article (Illumina Knowledge Article #6523), contact Illumina Technical Support [e-mail].