In many ways kiosk devices makes sense, take for instance the school library – multiple students needs access to a specific app or to the schools intranet to get relevant information and nothing else. Its here the Windows 10 kiosk mode comes into play. The thought about kiosk devices is basic that only the organisation decides what is available for the user.
Prerequisites:
- Microsoft Intune and Intune license.
- User account control (UAC) must be turned on to enable kiosk mode.
- Windows 10 Pro, Enterprise, or Education
My Environment:
For this scenario I have installed one Windows 10 devices with a local user via AutoPilot and enrolled with Microsoft Intune. I have created a group named “Kiosk devices” and added a Windows 10 device to it.
- For more info on how to create a security group in Azure AD follow this link -> https://docs.microsoft.com/bs-latn-ba/azure/active-directory/fundamentals/active-directory-groups-create-azure-portal
In this video you can see how to add and assign a kiosk browser to your tenant and device:
Or you can skip this video and follow the traditional blog post on how to Add and assign the Kiosk Browser from Microsoft store for business.
- Login to the Microsoft Store for Business website and search for Kiosk Browser and hit enter:
- Now click on the Kiosk Browser:
- Click Get the app:
- Now the kiosk browser is present in the inventory, click then Close:
- Then go to the Intune portal https://devicemanagement.microsoft.com and browser Client apps and click on Windows for Business and click the Sync button:
- Now the Kiosk Browser will be present in the Client Apps list and ready for assignment:
- Browse and find the kiosk browser app and assign a group to it:
Now lets create a Device Configuration Profile for our Kiosk settings.
In this video you can see how to configure Kiosk mode for Windows 10 devices:
Or you can skip this video and follow the traditional blog post on how to Create and assign a device configuration profile for Kiosk mode.
- Browse and click Create Profile:
- Then assign the profile a Name, Description, Platform and Profile type:
- Click then on the settings tab and Select a kiosk mode:
- Now choose Single app, full-screen kiosk, Auto logon (Windows 10) and Add Kiosk browser – The maintenance part is optional:
Note: Regarding User login type, in this scenario we will configure Auto logon, but you can also choose for a local or domain user for the purpose.
- Now assign the configuration profile to a group of devices:
Now lets test the result.
Before you start testing, verify that the Kiosk Browser app has been installed and Device Configuration Profile also is replayed to the device.
In this video you can see how the result looks presented by a virtuel machine.
Note: The name of the local user that has been created from the Device Configuration Profile and are used for auto login is called kioskUser0 and the default Full name (Loginname) is Full Screen – I changes that to KIOSK.
- Now try to start or restart the Kiosk device to see if it works.
- Only the Kiosk Browser is enabled and active on the Windows 10 device:
Happy deployment!