question

FraserBurnett-4291 avatar image
0 Votes"
FraserBurnett-4291 asked andyk-1490 edited

Update Teams for Users not signed in

Hi,

We use the machine wide installer for Teams. We run regular Nessus scans which now show out of date Teams versions installed in the users Appdata folder for people that have not signed into a particular PC in a while.

We are looking for a way to either update the installation version for users who are not signed in (don't think it is possible due to how the software installs in Appdata) or to remove all traces of the installation for users, but we can only have this happen for users not currently signed into the PC, as this could be disruptive to the currently signed in user.

I have a script that can do this, but if I use SCCM it uninstalls for everyone, I think possibly because the script runs as System.

Any advice would be welcomed.

office-teams-windows-itpro
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

JimmyYang-MSFT avatar image
1 Vote"
JimmyYang-MSFT answered FraserBurnett-4291 commented

Hi @FraserBurnett-4291

I am afraid there is no way to update Teams for users not signed in. The evidence can be found here:

65252-4.png


If the response is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.



4.png (109.1 KiB)
· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi JimmyYang-MSFT,

Sorry for the delay in getting back to you, I have now upvoted and accepted your answer.

I am still looking into a solution for this problem. We don't necessarily need to update Teams on users profiles, I am now going down the route of looking to run a script at PC shutdown to clean up everything to do with Teams within each user profiles AppData folders.

Thanks for taking the time to respond to my question.

Fraser

0 Votes 0 ·
andyk-1490 avatar image
0 Votes"
andyk-1490 answered andyk-1490 edited

We have the same nessus scanning

I decided to use group policy to remove old profiles.

Computer Configuration\Administrative Templates\System\User Profiles\Delete User Profiles older than a specific number of days on system restart

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

With the nessus scanning one could also argue, that to access the vulnerable exe in the stale profile, the threat actor would need admin privs, or be acting as part of the system.

And with those kind of permissions, they dont need the vulnerable exe.

0 Votes 0 ·