Originally written for the Microsoft Teams for Surface Hub (Preview) app, this article is now updated to support the GA version of the app. Images may still contain ‘Preview’.
In this post, I’m going to cover the steps required to push the Microsoft Teams for Surface Hub app to Surface Hubs and configure its options using Intune.
To push the app to the Surface Hub you’ll have to you’ll have to configure Intune and the Microsoft Store for Business to push apps to the Surface Hub. Follow this post to configure both if you haven’t done it yet.
Remember – you must acquire the offline license version of the Microsoft Teams app (No purchase required) to be able to push it using Intune:
After syncing the store with Intune, you’ll see the app in the Apps list:
Next, configure the Microsoft Teams app CSP settings in Intune.
Create a new Device configuration profile in Intune. Set the Platform to Windows 10 and later, and the Profile type to Custom:
There are two dedicated CSPs we’re using to configure the app on the Surface Hub. Both must be present for the app to work:
./Vendor/MSFT/SurfaceHub/Properties/SurfaceHubMeetingMode is the CSP that replaces the .ppkg files you’ll be using if you’re manually installing the app. it comes with the values of 0, 1 or 2 and would act as follows:
0– Skype for Business is the preferred app on the Surface Hub’s Start Screen, however you can still join Microsoft Teams meetings.1– Microsoft Teams is the preferred app on the Surface Hub’s Start Screen, however you can still join Skype for Business meetings.2– Microsoft Teams is the exclusive app on the Surface Hub’s Start screen and Skype for Business is disabled.
The Data type for this setting is Integer and you can choose any value from the above as illustrated in the following image:
./Vendor/MSFT/SurfaceHub/Properties/VtcAppPackageId is the CSP representing the app ID that’s replacing Skype for Business; Microsoft Teams. The value for this CSP is always Microsoft.MicrosoftTeamsforSurfaceHub_8wekyb3d8bbwe!Teams
The Data type for this CSP is String. Copy and paste the value from the line above as illustrated in the following image:
To assign the policies (App deployment and Device configuration) to the Surface Hubs, create a security group with the Surface Hubs device accounts:
Go back to the Microsoft Teams for Surface (Preview) app in the Apps list and click ‘Assignments’. Assign the app to the Security Group you created with the following settings:
- Assignment type must be Required.
- On the Select groups to include list, choose the group you created earlier and set the license type to Device Licensing:
Click ok and save the configuration.
Next, for the Device configuration profile, assign it to the Security Group you created:
Intune will push the and settings immediately. You may need to restart the Surface Hub to complete the process.
y0av. With a zero. 
Your instructions say to select Device Licensing as the License Type, but the screenshot shows User Licensing. Which is correct?
Device licensing.
hi, just looking to do this myself but cant see how to get an offline version of the app. is this still possible to do? I have the online version in the business store but this doesn’t seem to be coming across to intune
Hi Richard,
Make sure you enabled “Show offline licensed apps to people shopping in the Microsoft Store” in the Store’s Setting tab.
that did it, many thanks for that 🙂
What licenses are required for the Teams to work? Since we are selecting Device licensing while assigning the application, how will this work with users signing in with different license types?
The recommended license is the Office 365 Meeting Room license.
Users will take advantage of the license they’re assigned with in Office 365.
Hi y0av, how to manage this kind of offline app update? Can it controlled by Intune?
No, Windows Store apps are updated automatically once an update is available.
hi yoav
A question about a phenomenon that we have had for about 1 month with 3 Surface Hub at a customer
If a meeting is planned and a Surface Hub has been invited, it is not possible to join the meeting directly from the start screen. It is only logged in and the whiteboard starts without participating in the meeting.
Do you know this behaviour?
Regards
Hi Marc,
Please make sure you configured “DeleteComments $false” as part of Calendar processing.
This is a must for the One-touch meeting join function to work.
Without it, you’ll see the Teams/Skype app launching along with the Whiteboard app, but the meeting won’t start.
Hi Y0av,
Thanks for this, we were struggling to get Teams displaying as an app, we had the first CSP but not the VtcAppPackagID, added that and Teams now displays on the start screen.
However, clicking on a meeting or the Teams icon just launches Whiteboard, Teams doesn’t start. Any ideas on that?
Russell
Hi Russell,
Please make sure you configured “DeleteComments $false” as part of Calendar processing.
This is a must for the One-touch meeting join function to work.
Without it, you’ll see the Teams/Skype app launching along with the Whiteboard app, but the meeting won’t start.
Thanks Y0av,
We didn’t have that, and after adding it the Teams apps now launches but fails with an error “unknownAuthError”. I have opened a case with Microsoft Support and they have the logs from the device.