Intune KIOSK mode: Problems with XML

Question

Hello, Unfortunately, I have reached the end of my capabilities, as I have to use Intune in combination with a Windows 11 Pro in KIOSK mode. For this, the XML is to be transferred via the same configuration profile. According to Intune, there is no error and the configuration profile is successfully transferred with XML.

Attempt 1: In addition, the profile assignment was also applied to different accounts or all of them:

• <AutoLogonAccount rs5:DisplayName="Kiosk"/>
• <AutoLogonAccount/>
• <Account>kioskUser0</Account>
• <Account>.\kioskUser0</Account>
• <v3:GlobalProfile Id="{9A2A490F-10F6-4764-974A-43B19E722C23}"/>
• <Account>MultiAppKioskUser</Account>
  <DefaultProfile Id="{9A2A490F-10F6-4764-974A-43B19E722C23}"/>

  Attempt 2:

As an error analysis, an attempt was also made to check the event display, without any abnormalities in the reference. (Maybe I am missing a term / app / function and am reading something too much).

Troubleshoot kiosk mode issues

• "Applications and Services Logs\Microsoft\Windows\AssignedAccess\Operational " (activated, but no entries)
• "Applications and Services Logs\Microsoft\Windows\AssignedAccess\Admin" (activated, but no entries) Attempt 3:

An attempt was also made to obtain an assignment via the OMA URI "./Vendor/MSFT/AssignedAccess/Configuration". Without success, as there was a conflict with the existing configuration profile of the KIOSK mode. (My guess: The KIOSK profile tries to obtain an assignment via the same path).

Attempt 4: Another OMA URI has been configured with "./Vendor/MSFT/Policy/Config/Start/ConfigureStartPins" and "./Vendor/MSFT/Policy/Config/Start/ShowOrHideMostUsedApps". Problem is that it is applied to all profiles except the KIOSK profile.

• KIOSK profile remains empty.
• Other profiles are assigned the start layout after logging in.
• The XML of the kiosk mode was removed for the test.

  Does anyone know anything about problems with mapping under Windows 11 or have a trained eye on the subject?   Many thanks for any advice.

Answer 1

@RK-IT, Thanks for posting in Q&A. From your description, I know we have created a multi app kiosk profile and assign to different accounts. Based as I know, the profile is for shared devices, and we need to assign the profile to device group.

In the picture, I notice we have set "user logon type" and in Attempt 1, it seems we deploy a custom CSP with the same setting. If so, it will cause conflict as they actually using the same CSP to deploy. Please remove one.

After we remove any conflict configuration profile, if the error still exists, we can go to event viewer to check the event log under Applications and Services Logs > Microsoft > Windows > DeviceManagement-Enterprise-Diagnostic-Provider > Admin to see if any error exists.

Hope the above information can help.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.