Mandatory profile with Intune

PRK 16 Reputation points
2021-10-27T13:12:50.22+00:00

Hello,
We have a lab environment with 20 computers that users are allowed to run a number of third party applications. All computers auto login with the same azure user account.
What we would like to do is have the computers wipe any saved or created files during a user session on reboot. Also if a user deletes a shortcut on the desktop that icon would reappear on reboot.
Is there any way to setup a mandatory profile on these computer with Intune?
We look into Kiosk mode however I think that this profile might be to restrictive for this environment.

Any help is greatly appreciated.

Microsoft Intune Configuration
Microsoft Intune Configuration
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Configuration: The process of arranging or setting up computer systems, hardware, or software.
1,712 questions
Microsoft Intune
Microsoft Intune
A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.
4,313 questions
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Rahul Jindal [MVP] 9,131 Reputation points MVP
    2021-10-27T21:35:13.883+00:00
    0 comments
  2. Crystal-MSFT 42,796 Reputation points Microsoft Vendor
    2021-10-28T02:34:50.037+00:00

    @PRK , For shared device, we can try to configure shared multi-user profile which RahulJindal mentioned. In the profile, we can set "Share PC mode" as enable to turn on shared PC mode. In shared PC mode, only one user can sign in to the device at a time. set "Guest account" as guest to create a guest account locally on the device that will be shown on the sign-in screen. Set "Account management" as enable and "Account deletion" as "Immediately after log-out" to make sure that created guests accounts are deleted immediately after log-out;. We can also configure other settings we want. Here is the setting I configured in my environment:
    144393-image.png
    For apps, we can try to deploy app to the device group which are enrolled into Intune to get the apps we want:
    https://oliverkieselbach.com/2020/02/19/intune-application-targeting-for-windows-10-win32-apps-explained/
    Note: Here is a link for the reference.

    I have deployed a win32 app to our device and then login the device using the guest account. When I try to delete the app in control panel, it shows "The system administrator has set policies to prevent this installation" to prevent the uninstall.
    144297-image.png
    144335-image.png

    Also, I create a file on desktop, after restart, the file is not there.

    I think this is what you want. You can try. Hope it can help.

    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.