Microsoft Intune – Deploy Windows 10 device in kiosk mode with only Kiosk browser enabled. Single app mode.

In many ways kiosk devices makes sense, take for instance the school library – multiple students needs access to a specific app or to the schools intranet to get relevant information and nothing else. Its here the Windows 10 kiosk mode comes into play. The thought about kiosk devices is basic that only the organisation decides what is available for the user.


  • Microsoft Intune and Intune license.
  • User account control (UAC) must be turned on to enable kiosk mode.
  • Windows 10 Pro, Enterprise, or Education

My Environment:

For this scenario I have installed one Windows 10 devices with a local user via AutoPilot and enrolled with Microsoft Intune. I have created a group named “Kiosk devices” and added a Windows 10 device to it.

In this video you can see how to add and assign a kiosk browser to your tenant and device:

Or you can skip this video and follow the traditional blog post on how to Add and assign the Kiosk Browser from Microsoft store for business.

  • Now click on the Kiosk Browser:
  • Click Get the app:
  • Now the kiosk browser is present in the inventory, click then Close:
  • Now the Kiosk Browser will be present in the Client Apps list and ready for assignment:
  • Browse and find the kiosk browser app and assign a group to it:

Now lets create a Device Configuration Profile for our Kiosk settings.

In this video you can see how to configure Kiosk mode for Windows 10 devices:

Or you can skip this video and follow the traditional blog post on how to Create and assign a device configuration profile for Kiosk mode.

  • Browse and click Create Profile:
  • Then assign the profile a Name, Description, Platform and Profile type:
  • Click then on the settings tab and Select a kiosk mode:
  • Now choose Single app, full-screen kiosk, Auto logon (Windows 10) and Add Kiosk browser – The maintenance part is optional:

Note: Regarding User login type, in this scenario we will configure Auto logon, but you can also choose for a local or domain user for the purpose.

  • Now assign the configuration profile to a group of devices:

Now lets test the result.

Before you start testing, verify that the Kiosk Browser app has been installed and Device Configuration Profile also is replayed to the device.

In this video you can see how the result looks presented by a virtuel machine.

Note: The name of the local user that has been created from the Device Configuration Profile and are used for auto login is called kioskUser0 and the default Full name (Loginname) is Full Screen – I changes that to KIOSK.

  • Now try to start or restart the Kiosk device to see if it works.
  • Only the Kiosk Browser is enabled and active on the Windows 10 device:

Happy deployment!

Leave a Reply

Your email address will not be published. Required fields are marked *