Device Deployment

Playbook
Microsoft Teams Devices

https://aka.ms/teams-devices-
deployment-playbook

© Microsoft Corporation Microsoft 365

Device deployment
guidance
This playbook will assist you in delivering Microsoft
Teams Devices inside your organization. Example
scenarios can include Microsoft Teams Rooms (MTRs),
Teams phones, Teams panels, and Surface Hub.

We have organized these resources by activity type,

including device selection considerations, deployment
activities, and ongoing management and operations. This
real-world guidance is augmented by our technical
product documentation which can be found at
learn.microsoft.com.

For technical support, please open a support case or

reach out to your Microsoft account team.

© Microsoft Corporation Microsoft 365

Table of contents
Devices overview
Device selection
Important concepts
Configurations by device type
Security & network considerations
Conditional access / compliance policy examples
Maintenance & monitoring

Got Feedback?
aka.ms/TeamsPlaybookFeedback

NOTE: This playbook will focus on the most common & best practice methods for deploying/managing/monitoring Teams devices. Custom & complex environments should consult with their
account team and/or a partner for support.

© Microsoft Corporation Microsoft 365

 Devices overview

Microsoft 365
© Microsoft Corporation Microsoft 365
What are Teams Devices?
Teams makes it easy to get a portfolio of devices to meet your business
needs. This includes plug and play solutions such as headsets,
speakerphones, webcams, and monitors, where no extra configuration is
required.

Note: This playbook will not address plug and play solutions. For more
information, see the following:
https://learn.microsoft.com/microsoftteams/devices/usb-devices

Teams also supports a variety of purpose-built Teams enabled devices, such

as phones, displays, rooms and panels, which can be deployed as personal
devices or as shared devices, to meet the intended usage scenario.

Teams supports a portfolio of desk phones for users who require a

traditional phone experience.

Teams displays are a category of all-in-one dedicated Teams devices.

Teams rooms transform meeting spaces ranging from small huddle areas to
large conference rooms with a rich, collaborative Teams experiences.

Teams panels are dedicated Teams devices that display meeting details,
typically mounted outside meeting rooms.

© Microsoft Corporation Microsoft 365

Teams devices
Teams Room on Teams Room on Surface Hub Panel Phone Displays
Windows Android

• Shared experience • Shared experience • Personal and • Dedicated • Personal or • Personal or

• Windows-based • Android-based shared experience experience shared shared
• Windows-based supporting a experiences experiences
meeting room • Android-based • Android-based
• Android-based

Tip: The use cases matter

With the broad selection of devices available for Teams, make sure to select an appropriate device to meet your identified business needs.

© Microsoft Corporation Microsoft 365

 Personal | Shared
Shared devices leverage a resource or common user
account to deliver use cases leveraged by multiple
users. These include Teams Rooms on Windows and
Android, Teams Phones configured as common area
phones, and Teams Displays configured for
hotdesking scenarios.

Personal devices experiences extend the features and

functionality of Teams using a personal account. These
include Teams Phones & Teams Displays.

© Microsoft Corporation Microsoft 365

Teams devices for shared spaces on
Windows and Android

Core functionality is available on both platforms so end

users can always have great audio and video experiences,
use one-touch join to join meetings, and access inclusive
features such as live captions and raise hand.

As Microsoft brings new features to Teams and to Teams

Rooms, we strive to bring them to all platforms, but features
may roll out at different times due to several factors,
including things like technical feasibility and customer
feedback for each platform. This means you may see some
features rolling out on Windows before they come to the
Android platform.

To help guide you as to what features are available on

different platforms, you can refer to this chart.

Note: Not all Teams Rooms features will be included on this

list, so please continue to consult the Microsoft 365
roadmap and Microsoft sales representatives for additional
details.
 Device selection

Microsoft 365
© Microsoft Corporation Microsoft 365
Selecting your device experience

I II III IV
What type What type of If room, which type of room System accessories
of experience? device? device?

Microsoft Teams Rooms Panel

Personal Phone
on Android (MTRoA)

Microsoft Teams Rooms Intelligent devices,

Shared Display
on Windows (MTRoW) content cameras, etc.*

Room Surface Hub

Device selection examples:

Personal phone: Provide traditional desk phone experiences to single user
Shared phone: Provide traditional desk phone experiences shared by multiple users
Shared room with Panel: Provide enhanced meeting experiences on Windows-based device dedicated to a meeting room, used by multiple
users with panel displaying meeting room information mounted near the entry door.
Stay current with the growing list of certified Teams devices in the Teams devices marketplace.
* You can learn more about these devices here: Teams Intelligent Speaker & Content Camera
© Microsoft Corporation Microsoft 365
 Selecting your device experience:
Teams Room on Windows
I II III IV
What type What type of If room, which type of room System accessories
of experience? device? device?

Personal Phone MTRoA Panel

Intelligent devices,
Shared Display MTRoW
content cameras, etc.

Room Surface Hub

How to Provide best in class meeting room experiences

Deploy
• Bring Teams meetings to any meeting space
• Provides inclusive and interactive meetings
Recommended: • Flexible deployment options
Teams Room • Secure by design
on Windows • Manageable via Teams Admin Center and Pro Management Portal

© Microsoft Corporation Microsoft 365

 Selecting your device experience:
Teams Room on Android
I II III IV
What type What type of If room, which type of room System accessories
of experience? device? device?

Personal Phone MTRoA Panel

Intelligent devices,
Shared Display MTRoW
content cameras, etc.

Room Surface Hub

How to Provide best in class meeting room experiences

Deploy • Bring Teams meetings to any meeting space
Provides inclusive and interactive meetings
Recommended: •
Flexible deployment options
Teams Room
•
• Secure by design
on Android • Manageable via Teams Admin Center and Pro Management Portal

© Microsoft Corporation Microsoft 365

 Selecting your device experience: Surface Hub

I II III IV
What type What type of If room, which type of room System accessories
of experience? device? device?

Personal Phone MTRoA Panel

Shared Display MTRoW Intelligent devices

Room Surface Hub

How to Provide best in class whiteboard experiences

Deploy • Empower people to whiteboard together
• Provides inclusive and interactive meetings
Recommended: • Makes any place teamwork space with mobile flexibility
Secure by design
Surface Hub •
• Manageable via Teams Admin Center and Pro Management Portal

© Microsoft Corporation Microsoft 365

 Selecting your device experience: Teams Panel

I II III IV
What type What type of If room, which type of room System accessories
of experience? device? device?

Personal Phone MTRoA Panel

Intelligent devices,
Shared Display MTRoW
content cameras, etc.

Room Surface Hub

Provide status information about meeting spaces

How to • Compact touchscreen device typically mounted outside conference rooms near the
Deploy entrance
• Can leverage the same Teams Meeting Room account as the meeting space it is
deployed for
Recommended:
Provides a view of location and meeting details at a glance
Teams Panel
•
• Allows reserving of meeting spaces for ad hoc meetings
• Capable of running Microsoft Teams apps and Line of Business (LOB) apps

© Microsoft Corporation Microsoft 365

 Selecting your device experience:
Teams Phone (Common Area Phone (CAP) / shared)
I II III IV
What type What type of If room, which type of room Device considerations
of experience? device? device?

Touchscreen vs physical
Personal Phone MTRoA buttons

Shared Display MTRoW Headset vs handset

Room Surface Hub Video

How to
Deploy
Provide traditional desk phone experiences for
• Common Area Phones (CAP) such as lobbies and breakrooms
Shared use areas such as retail stores or manufacturing spaces
Recommended:
•
• Small huddle rooms that provide dedicated calling experiences
Teams Phone • Supports a wide range of calling features
(shared)

© Microsoft Corporation Microsoft 365

 Selecting your device experience:
Teams Phone (personal)
I II III IV
What type What type of If room, which type of room Device considerations
of experience? device? device?

Touchscreen vs physical
Personal Phone MTRoA buttons

Shared Display MTRoW Headset vs handset

Room Surface Hub Video

How to Provide traditional desk phone experiences for

Deploy • Users that prefer a physical form factor for voice focused scenarios
• User does not want to use a headset or speakerphone
Recommended: • May be beneficial in high volume calling user personas
Offload media to dedicated device separate from primary work device
Teams Phone •

(personal) • Supports a wide range of calling features

© Microsoft Corporation Microsoft 365

 Selecting your device experience:
Teams Display (shared/hotdesking)
I II III IV
What type What type of If room, which type of room System accessories
of experience? device? device?

Personal Phone MTRoA Panel

Intelligent Devices,
Shared Display MTRoW
Content Cameras, etc.

Room Surface Hub

How to Provides all-in-one dedicated Teams device experience

Deploy
• Users that prefer a physical form factor for video and content focused scenarios
• Allows users to reserve temporary workspaces in advance or on demand
Recommended: • Offload media to dedicated device separate from primary work device
Teams Display • Companion experience that allows seamless cross-device interaction
(shared/hotdesking)

© Microsoft Corporation Microsoft 365

 Selecting your device experience:
Teams Display (personal)
I II III IV
What type What type of If room, which type of room Device considerations
of experience? device? device?

Touch screen, no
Personal Phone MTRoA handset

Shared Display MTRoW

Room Surface Hub

How to Provides all-in-one dedicated Teams device experience

Deploy • Users that prefer a physical form factor for video and content focused scenarios
• Join with microphone, camera, and speakers (or Bluetooth headset)
Recommended: • Offload media to dedicated device separate from primary work device
Teams Display • Companion experience that allows seamless cross-device interaction
(personal) • Hands-free Teams interactions using Cortana

© Microsoft Corporation Microsoft 365

 Important concepts

Top

Microsoft 365
© Microsoft Corporation Microsoft 365
 What are Certified Devices?
The Microsoft Teams Devices Certification Program ensures certified devices meet a high standard, with higher performance targets and
quality metrics across the entire Teams experience (audio, video, user interface). Microsoft and Original Equipment Manufacturer (OEM)
partners are actively working together to ensure devices meet all certification requirements, including security, audio and video quality,
Teams experience, and accessibility.

For devices running Android: Certification end dates are based on the Android OS version running on the device when it enters the
certification program. Our OEM partners are working to extend the lifetime of the certification by upgrading the Android OS version and re-
certifying, or by releasing new models that are state-of-the-art. Beyond the certification period, Microsoft is committed to make efforts to
support the most recent version of the Teams client on such devices for two years following the end of the certification period.

Device certification information:

 Certified Teams Room on Windows (and peripherals): Click Here

 Certified Teams Rooms on Android: Click Here

 Certified Surface Hub Accessories: Click Here

 Certified Teams Panels: Click Here

 Certified Teams Phones: Click Here

 Certified Teams Displays: Click Here

© Microsoft Corporation Microsoft 365

 Teams Devices Management Portals
Microsoft
Microsoft 365 Teams Admin Endpoint
Admin Center Center Manager
Portal

Azure Active
Exchange OEM Management
Directory
Admin Center Portal (per OEM)
Portal

Microsoft Teams
Room Pro
Management Portal
(License required)

© Microsoft Corporation Microsoft 365

 Considerations at Scale
• Create a set of standards for your deployment that use case requirements for each

Design
type of space.
• Leverage certified devices for all deployments for the best experience
• Understand dependencies, map any partner teams, and engage as required for a
successful deployment

Implement
• Have processes understood and tested for implementation and problem resolution
• Engage on-site hands and plan resources to physically deploy as early as possible.

Monitor
• Create standard operating procedures for monitoring the performance of devices,
using tools such as the Quality of Experience Report for Devices
(aka.ms/qerpbitemplates)

© Microsoft Corporation Microsoft 365

 Configurations by
device type

Top

Microsoft 365
© Microsoft Corporation Microsoft 365
 Teams Rooms on Windows
 Resource account created: Click Here
 Set resource account policies in Exchange: Click Here
 Password expiration disabled: Click Here
 Meeting room license assigned: Click Here
 Phone number assigned: Click Here
 AAD security group created and all MTRoW resource accounts are
added to it: Click Here
 AAD dynamic group created for MTR devices (matching to device
name: “MTR-”): Click Here
 Intune Compliance Policy Created and assigned to dynamic device
group: Click Here
 Conditional access configured (with IP restrictions & device
compliance) and assigned to resource account group (exclude from
other existing policies): Click Here
 Ensure the AAD resource account group is in scope for Intune auto
enrollment with AAD join: Click Here
© Microsoft Corporation Microsoft 365
 Teams Rooms on Windows (cont.)
These items are intended to further secure your MTR deployment and
speed up the deployment time:
 How to join to Azure AD & Intune: Click Here
 Set the system name (MTR-SerialNumber): Click Here
 Configure PowerShell script to change the default local admin
password: Click Here
 Create an AAD security group and add user accounts you want to
have administrative access on your MTR: Click Here
 Configure an Intune CSP to deploy your new AAD admin group to
all MTRs: Click Here
 If using the Teams Pro Management Portal, you can set the Teams
Room Pro Installer to be deploy via Intune scoped to your device
AAD group: Click Here
 Set proxy settings: Click Here
 Deploy certificates: Click Here

© Microsoft Corporation Microsoft 365

 Teams Rooms on Android
 Resource account created: Click Here
 Set Exchange resource account policies: Click Here
 Password expiration disabled: Click Here
 Meeting room license assigned: Click Here
 Phone number assigned: Click Here
 Review authentication best practices for personal vs. shared: Click
Here
 Android device administrator enabled: Click Here
 AAD security group created for Android MTRs, resource account
added to it: Click Here
 Intune compliance policy created and assigned to AAD Group: Click
Here
 Conditional access configured (with IP restrictions & device
compliance) and assigned to AAD group (exclude from other existing
policies): Click Here

© Microsoft Corporation Microsoft 365

 Surface Hub
 Resource account created: Click Here
 Set Exchange resource account policies: Click Here
 Password expiration disabled: Click Here
 Meeting room license assigned: Click Here
 Phone number assigned: Click Here
 AAD security group created and all Surface Hub resource accounts
are added to it: Click Here
 AAD dynamic group created for Surface Hub devices (matching to
device name: “Hub-”): Click Here
 Intune compliance policy created and assigned to AAD group: Click
Here
 Conditional Access Configured (With IP Restrictions & Device
Compliance) and Assigned to AAD Group (exclude from other
existing policies): Click Here
 Ensure the AAD group is in scope for Intune Auto Enrollment with
AAD join: Click Here
© Microsoft Corporation Microsoft 365
 Surface Hub (cont.)
These items are intended to further manage your Surface Hub
deployment and speed up the deployment time:
 Create a device restriction profile: Click Here
 Create an AAD security group and add user accounts you want to
have administrative access on your Surface Hubs: Click Here
 Add AAD security group as Admin on the Hubs: Click Here
 Set Surface Hub into Teams Only mode: Click Here
 Configure Teams Application Settings: Click Here
 Configure 802.1x network authentication: Click Here
 Install progressive web apps: Click Here
 Customize the start menu: Click Here

© Microsoft Corporation Microsoft 365

 Teams Panel
Note: We recommend using existing Teams Room resource accounts
unless no Room Device is in the space (first 4 bullets).
 Resource Account Created: Click Here
 Set Exchange Resource Account Policies: Click Here
 Password Expiration Disabled: Click Here
 Meeting Room License Assigned: Click Here
 Android Device Administrator Enabled: Click Here
 AAD group created for Teams Panels, resource account added to it:
Click Here
 Intune Compliance Policy Created and Assigned to AAD Group:
Click Here
 Conditional Access Configured (With IP Restrictions & Device
Compliance) and Assigned to AAD Group (exclude from other
existing policies): Click Here
 Optional: Add line of business (LOB) apps: Click Here
© Microsoft Corporation Microsoft 365
 Teams Phone (CAP)
 Resource Account Created: Click Here
 Password Expiration Disabled: Click Here
 Common Area Phone License Assigned: Click Here
 Phone Number Assigned: Click Here
 Adjust IP Phone Policies: Click Here
 Authentication Best Practices for Personal vs. Shared: Click Here
 Android Device Administrator Enabled: Click Here
 AAD security group created for CAP Phones, resource account
added to it: Click Here
 Intune Compliance Policy Created and Assigned to AAD Group:
Click Here
 Conditional Access Configured (With IP Restrictions & Device
Compliance) and Assigned to AAD Group (exclude from other
existing policies): Click Here

© Microsoft Corporation Microsoft 365

 Teams Phone (Personal)
 Android Device Administrator Enabled: Click Here
 Review licenses assigned to users that may utilize these devices to
ensure compliance with Azure AD and Intune features detailed
below.
 Review Authentication Best Practices for Personal vs. Shared: Click
Here
 Intune Compliance Policy Created and Assigned to AAD Group:
Click Here
 Conditional Access (without IP restrictions if deployed outside
office) & Device Compliance configured and Assigned to AAD
Group: Click Here

© Microsoft Corporation Microsoft 365

 Teams Display (Shared/Hot-desking)
 Resource Account Created: Click Here
 Set Exchange Resource Account Policies: Click Here
 Password Expiration Disabled: Click Here
 Meeting Room License Assigned: Click Here
 Phone Number Assigned: Click Here
 Android Device Administrator Enabled: Click Here
 Authentication Best Practices for Personal vs. Shared: Click Here
 AAD security group created for displays, resource account added to
it: Click Here
 Intune Compliance Policy Created and Assigned to AAD Group:
Click Here
 Conditional Access Configured (With IP Restrictions) and Assigned
to AAD Group (exclude from other existing policies): Click Here &
Click Here
 Configure hot-desking policy (if desired): Click Here
© Microsoft Corporation Microsoft 365
 Teams Display (Personal)
 Android Device Administrator Enabled: Click Here
 Review licenses assigned to users that may utilize these devices to
ensure compliance with Azure AD and Intune features detailed
below.
 Review Authentication Best Practices for Personal vs. Shared: Click
Here
 Intune Compliance Policy Created and Assigned to AAD Group:
Click Here
 Conditional Access (without IP restrictions if deployed outside
office) & Device Compliance configured and Assigned to AAD
Group: Click Here

© Microsoft Corporation Microsoft 365

 Intelligent Speaker
Note: Intelligent Speaker is currently only supported with Teams Rooms on Windows

IT Admin Guidance:
 Review Intelligent Speaker requirements: Click Here
 Connect and setup the Intelligent Speaker: Click Here
 Enable user recognition and transcription: Click Here
 Teams Premium licensed users will receive a ‘Meeting Recap’ with in-
room speaker attribution: Click Here
End User Guidance:
Note: Each meeting attendee must be invited individually, either on the original invite or through a
forwarded invitation. Click here for more info

 Advise users to setup their voice profile in Teams: Click Here

 How to update or remove a voice profile: Click Here
 How to identify an unknown speaker during a meeting: Click Here
 How to correct an identification during live transcription: Click Here

© Microsoft Corporation Microsoft 365

 Security & Network
Considerations

Microsoft 365
© Microsoft Corporation Microsoft 365
 Security Considerations
 Resource Accounts:
 Do not enforce password expiration
 Do not enforce multi-factor authentication through another device (push notification, text, phone call, etc), instead
leverage known location and/or device compliance as the second factor to secure accounts
 Conditional Access:
 Resource accounts should be excluded from user CA policies and have unique policies created to ensure the resource
accounts are locked down appropriately
 Consider device filters to apply your CA policies
 Local Device Security:
 Ensure all local administrative passwords are changed during setup
 Teams Rooms performance is tested with Microsoft Defender. Disabling this or adding other endpoint security
software is not supported as it can lead to unpredictable results and potential system degradation
 Administrative Portals:
 Only grant those who need access to manage devices access to the Teams Admin Center & Pro Management portals
and scope those permissions to specific devices.

Security Guidance: Windows, Android, & Surface Hub

© Microsoft Corporation Microsoft 365

Network Connectivity Requirements & Considerations
Teams Teams
Surface Teams Teams Teams
Room on Room on
Hub Panels Phone Display
Windows Android
Microsoft Teams Required Required Required Required Required Required
Microsoft Office 365 Required Required Required Required Required Required
Microsoft Intune Optional Required Required Required Required Required
Microsoft Store Required N/A Required N/A N/A N/A
Windows Update Required N/A Required N/A N/A N/A
Pro Management Portal Optional Optional Optional N/A N/A N/A
Azure Monitor Optional N/A Optional N/A N/A N/A
Unauthenticated Proxy Optional Optional* Optional Optional* Optional* Optional*
Authenticated Proxy N/A N/A N/A N/A N/A N/A
QoS Optional Optional Optional Optional Optional Optional
802.1x Optional Optional* Optional Optional* Optional* Optional*
Bandwidth Policy 10 mbps 10 mbps 10 mbps
© Microsoft Corporation Microsoft 365
*Review OEM Documentation
 Conditional Access /
Compliance Policy
Examples

Top

Microsoft 365
© Microsoft Corporation Microsoft 365
 Conditional Access with Teams Devices
Teams Devices support integration with Conditional Access in Azure Active Directory.

Planning your access strategy around both the account being used, and the device type. The
importance of this is reflected both in the conditional access policies assigned to the account, but
also the capabilities of the device against those policies.

Examples include:
• Shared Android Devices vs Android Mobile Phones
• Use of Filters for Devices to configure granular policies
• Use of Multi Factor Authentication

Tip: Use the “What If” tool within Microsoft Entra Admin Center to view what policies are being
applied to the accounts your devices will sign-in with.

Tip: Check what policies are supported, per device type here
Tip: Check out our best practices for Conditional Access and Intune compliance here
© Microsoft Corporation Microsoft 365
 Understanding Intune Enrollment
Android enrollment
• Company Portal client built into the firmware enrolls using Device
Administrator profile at time of login.
• Controlled by the assignment of the Intune license to the resource
account the device signs into.
• Intune enrollment is recommended for all Teams Android devices

Windows enrollment
• Leverages existing Windows 10 IoT enrollment process
• Devices can be enrolled into Intune with two methods:
• Using the Teams resource account
• Using a DEM account for bulk enrolment which allows the
device to be setup in shared device mode (Recommended)
• Can be automated using a provisioning package.
Enrolling Microsoft Teams Rooms on Windows devices with Microsoft
Endpoint Manager - Microsoft Tech Community

© Microsoft Corporation Microsoft 365

 Illustrating Conditional Access with Teams Devices

© Microsoft Corporation Microsoft 365

 Shared devices conditional access (Windows Devices)
Intune compliance + Trusted location

Azure Active Directory Conditional Access Rule

Intune
Assignment Access Controls
Compliance Policy

Compliance
Users & Groups: Conditions: Grant Type:
Settings

Shared devices group Device Platforms Firewall: Enabled

Grant Access Defender: Enabled

Windows Actions for

Cloud Apps: non-compliance
Locations Controls: Mark device
Exchange Online noncompliant:
All trusted locations Require Device Immediately
to be marked
Microsoft Teams as Compliant

SharePoint Online

© Microsoft Corporation Microsoft 365

 Shared devices conditional access (Shared Android Devices)
Intune compliance + Device filters

Azure Active Directory Conditional Access Rule

Intune
Assignment Access Controls
Compliance Policy

Compliance
Users & Groups: Conditions: Grant Type:
Settings

Shared devices group Device Platforms Rooted Devices: Block

Grant Access Block Minimum OS:
8.0
Android Android
Cloud Apps: Actions for
Controls: non-compliance
Locations
Exchange Online Mark device
All trusted locations Require Device noncompliant:
to be marked Immediately
Microsoft Teams as Compliant
Device Scoping Filters Assignments
Shared Devices Group
Team Android
SharePoint Online
Device Models Device Scoping
Filters
Teams Android
Device Models

© Microsoft Corporation Microsoft 365

 Shared devices conditional access (Personal Android Devices)
Intune compliance + Device filters

Azure Active Directory Conditional Access Rule

Intune
Assignment Access Controls
Compliance Policy

Compliance
Conditions: Grant Type:
Settings
Device Platforms Rooted Devices: Block
Grant Access Block Minimum OS:
8.0
Android Android
Cloud Apps: Actions for
Controls: non-compliance
Locations
Exchange Online Mark device
All trusted locations Require Device noncompliant:
to be marked Immediately
Microsoft Teams as Compliant
Device Scoping Filters

Team Android
SharePoint Online
Device Models Device Scoping
Filters
Teams Android
Device Models

© Microsoft Corporation Microsoft 365

 Maintenance &
Monitoring

Microsoft 365
© Microsoft Corporation Microsoft 365
 Monitoring Teams Devices
I II III IV V VI

Teams Panel Teams Phone Teams Display

Teams Room on Teams Room on Surface Hub
Windows Android

Teams Admin Teams Admin Teams Admin Teams Admin Teams Admin Teams Admin
Center Center Center Center Center Center

Pro Management Pro Management Pro Management

Portal Portal Portal

Azure Monitor Azure Monitor

3rd Party Tools 3rd Party Tools 3rd Party Tools 3rd Party Tools 3rd Party Tools

Monitor & Ensure Stability of Your Devices

Available
• Ensure you are always running the latest certified Teams device software & firmware
• Know when your devices are online or offline
Recommended: • Monitor connected peripherals
Proactive solutions to resolve issues with your devices
Teams Admin Center •
Role based access control to ensure the right people monitor the right devices
& Pro Portal
•

© Microsoft Corporation Microsoft 365

 Managing Teams Devices
I II III IV V VI

Teams Panel Teams Phone Teams Display

Teams Room on Teams Room on Surface Hub
Windows Android

Teams Admin Teams Admin Teams Admin Teams Admin Teams Admin Teams Admin
Center Center Center Center Center Center

Pro Management Pro Management Pro Management

Portal Portal Portal

Configuration Configuration
Files Files

Intune Intune Intune Intune Intune Intune

Group Policy

AD / AAD AAD AD / AAD AAD AAD AAD

SCCM

3rd Party Tools 3rd Party Tools 3rd Party Tools 3rd Party Tools 3rd Party Tools

Recommended Available

© Microsoft Corporation Microsoft 365

 Keeping Teams Devices Up to Date
 Teams Room on Windows Devices:
 Use Teams Room Pro Management Portal to control updates on your devices in
a fully configurable ring model where you select the order your devices receive
updates so you can test before deploying to your entire environment
 Without Teams Room Pro Management Portal the MTR will automatically pull
Teams Room app updates from the Microsoft Store
 Updates will be applied during maintenance cycle (~2:30AM Local Device Time)
 Teams Android Devices
 Teams Admin Center will automatically push Android firmware N-1 once
released
 Immediate / 30 Day / 90 Day options
 Teams app updates must be manually installed if they are deployed separately
from firmware
 The Pro Management Portal is planned to control updates soon
 Surface Hub
 The Surface Hub will automatically pull Teams Room app updates
 The Surface Hub will automatically download Windows Update

© Microsoft Corporation Microsoft 365

 Investigating Device Issues
 Review published known issues and
guidance in the Teams Room Pro Portal
 Open a support case
 Provide logs from device to support
engineer
 Download logs from Teams Devices using
one of the below methods:
 Use Teams Admin Center to download device logs
 Use Teams Rooms Pro Portal to download device logs
 Use PowerShell script to collect device logs on
MTRoW
 USB drive to collect logs from Surface Hub

© Microsoft Corporation Microsoft 365

 Day in the Life of a Teams Device Admin
• Monitor for device alerts​ from Teams Admin Center
• Monitor for Actions Required from the Teams Room Pro Portal
1
• As needed, onboard new Teams devices​

• Ensure you have installed the latest version of the QER MTR Power BI template​
• Review QER MTR Power BI for MTR health and user experience issues and remediate​
• Sign on to the Teams Room Pro Management Portal and confirm updates are
applying successfully and no issues need to be addressed​
• Sign on to Teams Admin Center and confirm devices are updated and no issues need to be
addressed​
7 • Review new Teams Room software releases for MTRoW and MTRoA
• Review What’s New In Teams Devices for a complete list of updates​
• Review the Microsoft 365 Roadmap for planned and released MTR features​
• Review the Teams blog for insights into new and upcoming features and announcements for
Teams, including MTR
• Review health & usage reports in Teams Pro Management Portal

• Proactive Physical Inspection of Devices

90
© Microsoft Corporation Microsoft 365
 Thank you

Got Feedback?
aka.ms/TeamsPlaybookFeedback

© Microsoft Corporation Microsoft 365