This page describes these recommended configurations of Splashtop Streamer and addons (Samsung and Zebra) on Microsoft Intune.
Pre-requisites
Add the following apps to Intune through Managed Google Play:
- Splashtop Streamer
- Splashtop Add-on: Samsung (Knox)
- Splashtop Add-on: Zebra
- Zebra OEMConfig powered by MX
- Knox Service Plugin
Configurations for Splashtop Streamer
Notice: The app configuration relies on Android Enterprise.
Step 1: In Intune, go to Apps in the left navigation pane, then choose App Configuration Policies in the middle pane, click Add on the top of right pane to create a new App Configuration policy of Managed Devices for Splashtop Streamer.
Step 2: In the guide, give a name to the policy, set Android Enterprise as the platform, and Fully managed as the profile type, and add Splashtop Streamer as the targeted app.
Step 3: In next screen, grant necessary permissions and add configuration key which are necessary for Splashtop Streamer work correctly.
Permissions
The following permissions are recommended to Auto Grant to Splashtop Streamer.
- Phone state (read)
- External storage (read)
- External storage (write)
Configuration keys:
Deploy Code: Fill in the Deploy Code created in my.splashtop.com > management > deployment
Step 4: Finish remaining steps of the policy creation, and push it to target devices.
Configurations for Zebra devices
Notice: There are two versions of Zebra OEM Config (Refer to Zebra support article for more detail):
- "Zebra OEMConfig Powered by MX" is OEMConfig 11.9, a new version for Zebra devices running Android 11 and LATER.
- "Legacy Zebra OEMConfig" is the original version of Zebra OEMConfig, and is NOT compatible with devices running Android 13 or later
Zebra OEMConfig Powered by MX
Step 1: Push Zebra OEMConfig Powered by MX app and Splashtop Addon: Zebra app to targeted Zebra devices
Step 2: Go to Devices in the left pane of Intune console, choose Configuration profiles in the middle pane, and click create profile in the right pane. Select Android Enterprise as the platform and OEMConfig as the profile type in the popup, then click Create.
Step 3: Give the profile a name, and select Zebra OEMConfig Powered by MX as the associated app in the right pane.
Step 4: In Configuration settings, choose Configuration designer, and configure the items per the video, then click Next
Item | Value |
Package name | com.splashtop.streamer.addon.zebra |
Package Signature Certificate (Please make sure no extra space when you copy the content to the edit box in the lines) |
MIICLTCCAZagAwIBAgIETPiZczANBgkqhkiG9w0BAQUFADBaMQswCQYDVQ |
Permission |
Set System Alert Window to Grant |
Service 1 |
com.zebra.eventinjectionservice |
Service 2 |
com.zebra.remotedisplayservice |
Service 3 |
content://oem_info/oem.zebra.secure/build_serial |
Service 4 |
content://oem_info/wan/imei |
Step 5: no change in Scope tags and go to Assignments, select targeted Zebra devices
Step 6: In Review + create, click Create button to finish the profile creation and wait for it to push to devices.
Notice: Please launch the Splashtop Streamer app after applying these settings, or, just restart Splashtop Streamer to make these setting available.
Legacy Zebra OEMConfig
Step 1: Push the Legacy Zebra OEMConfig app and Splashtop Addon: Zebra app to targeted Zebra devices
Step 2: Go to Devices in the left pane of Intune console, choose Configuration profiles in the middle pane, and click create profile in the right pane. Select Android Enterprise as the platform and OEMConfig as the profile type in the popup, then click Create.
Step 3: Give the profile a name, and select Legacy Zebra OEMConfig as the associated app in the right pane.
Step 4: In Configuration settings page, create five transaction steps like the following, details explained in below.
Transaction 1:
Type |
Service Access Configuration |
|
Purpose |
Allow Splashtop Streamer to enable remote control (MX version must be 8.3 or higher) |
|
Fields |
Field |
Value |
Service Binding Action |
Allow |
|
Allow Service Identifier |
com.zebra.eventinjectionservice |
|
Service Caller Action |
Allow |
|
Allow Service Identifier |
com.zebra.eventinjectionservice |
|
Allow Caller Package |
com.splashtop.streamer.addon.zebra |
|
Allow Caller Signature |
<see below caller signature value> |
Caller signature:
MIICLTCCAZagAwIBAgIETPiZczANBgkqhkiG9w0BAQUFADBaMQswCQYDVQQGEwJV
UzELMAkGA1UECBMCQ0ExETAPBgNVBAcTCFNhbiBKb3NlMRcwFQYDVQQKEw5TcG
xhc2h0b3AgSW5jLjESMBAGA1UEAxMJU3BsYXNodG9wMCAXDTEwMTIwMzA3MTcw
N1oYDzMwMDkwNDA1MDcxNzA3WjBaMQswCQYDVQQGEwJVUzELMAkGA1UECBM
CQ0ExETAPBgNVBAcTCFNhbiBKb3NlMRcwFQYDVQQKEw5TcGxhc2h0b3AgSW5jLjE
SMBAGA1UEAxMJU3BsYXNodG9wMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKB
gQClZfjONz3Vr2IDexLFln9IPaLLCf/KCF1WDeCcOLV4fOkq0QBD+monayIDENquBIqA4
xUl2cbr9UXWKFqtf3Ra9fEu3YaqepXw0lAaBnnd7VWuSFUSQgDMIqXjSw8Co/MCd5r
EdRS5/wcQGsVj+yBdQAIoh17F6plsnsYSC6hy7QIDAQABMA0GCSqGSIb3DQEBBQUA
A4GBAIMtZe/pccKHfD5PUdBZ94Sm7FyNFBYtz5GPfDN4DqIem8gdkPp/0ij7qtAF4E
h//IWPA1uv/TzfBG4lx4kR3s6Yb1wAsYBzIGhyyiS+VsER5ltwKokBAjNoDuU6GRhPlFK0
WFWnwb34ZigOh50MlVNGkEYzS2wnElrwLWJcdEUI
Transaction 2:
Type |
Service Access Configuration |
|
Purpose |
Enable ability to eliminate the system screen capture prompt (MX version must be 9.3 or higher) |
|
Fields |
Field |
Value |
Service Binding Action |
Allow |
|
Allow Service Identifier |
com.zebra.remotedisplayservice |
|
Service Caller Action |
Allow |
|
Allow Service Identifier |
com.zebra.remotedisplayservice |
|
Allow Caller Package |
com.splashtop.streamer.addon.zebra |
|
Allow Caller Signature |
<see below caller signature value> |
Caller signature:
MIICLTCCAZagAwIBAgIETPiZczANBgkqhkiG9w0BAQUFADBaMQswCQYDVQQGEwJV
UzELMAkGA1UECBMCQ0ExETAPBgNVBAcTCFNhbiBKb3NlMRcwFQYDVQQKEw5TcG
xhc2h0b3AgSW5jLjESMBAGA1UEAxMJU3BsYXNodG9wMCAXDTEwMTIwMzA3MTcw
N1oYDzMwMDkwNDA1MDcxNzA3WjBaMQswCQYDVQQGEwJVUzELMAkGA1UECBM
CQ0ExETAPBgNVBAcTCFNhbiBKb3NlMRcwFQYDVQQKEw5TcGxhc2h0b3AgSW5jLjE
SMBAGA1UEAxMJU3BsYXNodG9wMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKB
gQClZfjONz3Vr2IDexLFln9IPaLLCf/KCF1WDeCcOLV4fOkq0QBD+monayIDENquBIqA4
xUl2cbr9UXWKFqtf3Ra9fEu3YaqepXw0lAaBnnd7VWuSFUSQgDMIqXjSw8Co/MCd5r
EdRS5/wcQGsVj+yBdQAIoh17F6plsnsYSC6hy7QIDAQABMA0GCSqGSIb3DQEBBQUA
A4GBAIMtZe/pccKHfD5PUdBZ94Sm7FyNFBYtz5GPfDN4DqIem8gdkPp/0ij7qtAF4E
h//IWPA1uv/TzfBG4lx4kR3s6Yb1wAsYBzIGhyyiS+VsER5ltwKokBAjNoDuU6GRhPlFK0
WFWnwb34ZigOh50MlVNGkEYzS2wnElrwLWJcdEUI
Transaction 3:
Type |
Service Access Configuration |
|
Purpose |
Enable ability to retrieve Serial Number (Need to be Android 10 or higher) |
|
Fields |
Field |
Value |
Service Binding Action |
Allow |
|
Allow Service Identifier |
content://oem_info/oem.zebra.secure/build_serial |
|
Service Caller Action |
Allow |
|
Allow Caller Package |
com.splashtop.streamer.addon.zebra |
|
Allow Caller Signature |
<see below caller signature value> |
Caller signature:
MIICLTCCAZagAwIBAgIETPiZczANBgkqhkiG9w0BAQUFADBaMQswCQYDVQQGEwJV
UzELMAkGA1UECBMCQ0ExETAPBgNVBAcTCFNhbiBKb3NlMRcwFQYDVQQKEw5TcG
xhc2h0b3AgSW5jLjESMBAGA1UEAxMJU3BsYXNodG9wMCAXDTEwMTIwMzA3MTcw
N1oYDzMwMDkwNDA1MDcxNzA3WjBaMQswCQYDVQQGEwJVUzELMAkGA1UECBM
CQ0ExETAPBgNVBAcTCFNhbiBKb3NlMRcwFQYDVQQKEw5TcGxhc2h0b3AgSW5jLjE
SMBAGA1UEAxMJU3BsYXNodG9wMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKB
gQClZfjONz3Vr2IDexLFln9IPaLLCf/KCF1WDeCcOLV4fOkq0QBD+monayIDENquBIqA4
xUl2cbr9UXWKFqtf3Ra9fEu3YaqepXw0lAaBnnd7VWuSFUSQgDMIqXjSw8Co/MCd5r
EdRS5/wcQGsVj+yBdQAIoh17F6plsnsYSC6hy7QIDAQABMA0GCSqGSIb3DQEBBQUA
A4GBAIMtZe/pccKHfD5PUdBZ94Sm7FyNFBYtz5GPfDN4DqIem8gdkPp/0ij7qtAF4E
h//IWPA1uv/TzfBG4lx4kR3s6Yb1wAsYBzIGhyyiS+VsER5ltwKokBAjNoDuU6GRhPlFK0
WFWnwb34ZigOh50MlVNGkEYzS2wnElrwLWJcdEUI
Transaction 4:
Type |
Service Access Configuration |
|
Purpose |
Enable ability to retrieve IMEI (Need to be Android 10 or higher) |
|
Fields |
Field |
Value |
Service Binding Action |
Allow |
|
Allow Service Identifier |
content://oem_info/wan/imei |
|
Service Caller Action |
Allow |
|
Allow Caller Package |
com.splashtop.streamer.addon.zebra |
|
Allow Caller Signature |
<see below caller signature value> |
Caller signature:
MIICLTCCAZagAwIBAgIETPiZczANBgkqhkiG9w0BAQUFADBaMQswCQYDVQQGEwJV
UzELMAkGA1UECBMCQ0ExETAPBgNVBAcTCFNhbiBKb3NlMRcwFQYDVQQKEw5TcG
xhc2h0b3AgSW5jLjESMBAGA1UEAxMJU3BsYXNodG9wMCAXDTEwMTIwMzA3MTcw
N1oYDzMwMDkwNDA1MDcxNzA3WjBaMQswCQYDVQQGEwJVUzELMAkGA1UECBM
CQ0ExETAPBgNVBAcTCFNhbiBKb3NlMRcwFQYDVQQKEw5TcGxhc2h0b3AgSW5jLjE
SMBAGA1UEAxMJU3BsYXNodG9wMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKB
gQClZfjONz3Vr2IDexLFln9IPaLLCf/KCF1WDeCcOLV4fOkq0QBD+monayIDENquBIqA4
xUl2cbr9UXWKFqtf3Ra9fEu3YaqepXw0lAaBnnd7VWuSFUSQgDMIqXjSw8Co/MCd5r
EdRS5/wcQGsVj+yBdQAIoh17F6plsnsYSC6hy7QIDAQABMA0GCSqGSIb3DQEBBQUA
A4GBAIMtZe/pccKHfD5PUdBZ94Sm7FyNFBYtz5GPfDN4DqIem8gdkPp/0ij7qtAF4E
h//IWPA1uv/TzfBG4lx4kR3s6Yb1wAsYBzIGhyyiS+VsER5ltwKokBAjNoDuU6GRhPlFK0
WFWnwb34ZigOh50MlVNGkEYzS2wnElrwLWJcdEUI
Transaction 5:
Type |
Power Configuration |
|
Purpose |
Opt-out battery optimization of Splashtop Streamer |
|
Fields |
Field |
Value |
Battery Optimization Action |
Remove |
|
Remove Package Names |
com.splashtop.streamer.csrs |
Step 5: Finish the profile creation guide and push to target devices
Notice: Please launch the Splashtop Streamer app after applying these settings, or, just restart Splashtop Streamer to make these setting available.
Configurations for Samsung device
Part 1: Opt-out Splashtop Streamer from Battery optimization
There are special configurations needed to activate addon for Samsung device leveraging Knox Service Plugin.
Step 1: Push Knox Service Plugin app and Splashtop Addon: Samsung (Knox) app to target Samsung devices.
Step 2: Go to Devices in the left pane of Intune console, choose Configuration profiles in the middle pane, and click create profile in the right pane. Select Android Enterprise as the platform and OEMConfig as the profile type in the popup, then click Create.
Step 3: Give the profile a name, and select Knox Service Plugin as the associated app in the right pane.
Step 4: In Configuration settings page, Click Configure besides Device-wide policies, in next screen, turn on “Enable device policy controls”, and then click Configure besides Application management policies, in next screen, turn on “Enable application management controls”, and fill in “com.splashtop.streamer.csrs” in the Battery optimization allowlist. This is to opt-out battery optimization of Splashtop Streamer.
Step 5: Finish the remaining steps and push to target Samsung devices.
Part 2: Configure Splashtop Addon: Samsung (Knox) to be activated automatically
Step 1: Go to Apps in the left pane, and choose App configuration policies in the middle pane, and click Add to create a new app configuration file for Managed Devices
Step 2: In the guide, give a name to the policy, select Android Enterprise as Platform, and select Fully Managed as the profile type, and select Splashtop Addon: Samsung (Knox) in the right pane as the associated app.
Step 3: in next page, grant permission and configure two app configuration items to the app, detail described in below
Permissions:
- External storage (read): Auto grant
- External storage (write): Auto grant
Configuration keys:
- Activate knox automatically: true, it will try to automatically activate Knox when Splashtop Streamer binds to the addon, if the Samsung device has been already provisioned with Knox (the part 1 described above actually will do Knox provision), the Knox can be activated automatically, otherwise, the Knox License agreement might be prompted and needs manually interaction to accept on the device side.
- Screen capture mode: Knox built-in screen capture. Knox provides screen capture capability with no need of user’s manual accept of screen capture, although we find it a little bit buggy that on some particular device, it might not be able to capture the screen, or the captured screen is blank/black or white, but it’s still strongly recommended to use it as first try for unattended support mode. System screen capture is another option provided, which use Android’s system screen capture, but it will require user’s manual interaction to accept the screen capture prompt.
Step 4: Finish the remaining settings of the policy creation guide, and push to target devices.
Configurations for other devices
For other devices (rather than Samsung and Zebra), you need to push the appropriate addon to target devices, and no extra configurations needed.