Using edge in multi-app booth mode(kiosk mode), I couldn't download.docx.xlsx .zip and other files...

Question

Using edge in multi-app booth mode(kiosk mode), I couldn't download.docx.xlsx .zip and other files...

yuan huang 40

Using edge in multi-app booth mode(kiosk mode), I couldn't download.docx.xlsx .zip and other files, the prompt cannot be downloaded - it has been blocked, but you can download jpg format and.HTML format files, cut back to the normal user mode can be downloaded normally, may I ask in the multi-application booth mode, where is the edge download limit done, how to modify? Allow it to download files with extensions such as.docx.xlsx.

Using edge in multi-app booth mode(kiosk mode), I couldn't download.docx.xlsx .zip and other files, the prompt cannot be downloaded - it has been blocked, but you can download jpg format and.HTML format files, cut back to the normal user mode can be downloaded normally, may I ask in the multi-application booth mode, where is the edge download limit done, how to modify? Allow it to download files with extensions such as.docx.xlsx. .

Anonymous

2023-06-19T08:39:26.29+00:00

Hi @yuan huang,

Based on your description, are you referring to Use kiosk mode features?Could you provide more details so that we can reproduce this issue? This will help to solve the issue. Thank you for your understanding.

yuan huang 40

hi@XuDong Peng-MSFT，

Yes, it is kiosk mode. After users log in to kiosk mode, edge cannot download files such as .docx .zip .rar .xlsx, but it can download .jpg .html files

I would like to know where I can adjust the policy and I would like to download some specified files such as .docx .xlsx etc.

In normal mode, edge can download files normally

企业微信截图_20230620151341

I send out the xml file that I generated for kiosk mode:

<?xml version="1.0" encoding="utf-8" ?>
<AssignedAccessConfiguration
    xmlns="http://schemas.microsoft.com/AssignedAccess/2017/config"
    xmlns:v2="http://schemas.microsoft.com/AssignedAccess/201810/config"
    xmlns:v3="http://schemas.microsoft.com/AssignedAccess/2020/config"
>
    <Profiles>
        <Profile Id="{5B328106-BD89-2863-AB27-6ED6EE355682}">
            <AllAppsList>
                <AllowedApps>
                    <App AppUserModelId="Microsoft.Windows.Explorer" />
                    <App AppUserModelId="windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel" />
                    <App AppUserModelId="5319275A.WhatsAppDesktop_cv1g1gvanyjgm!App" />
                    <App DesktopAppPath="C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE" />
                    <App DesktopAppPath="C:\Program Files\Microsoft Office\root\Office16\EXCEL.EXE" />
                    <App DesktopAppPath="C:\Program Files\Microsoft Office\root\Office16\OUTLOOK.EXE" />
                    <App DesktopAppPath="C:\Program Files\Microsoft Office\root\Office16\POWERPNT.EXE" />	
                    <App DesktopAppPath="C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe" />
                    <App DesktopAppPath="C:\Program Files\OpenVPN Connect\OpenVPNConnect.exe" />
                    <App DesktopAppPath="C:\Users\work\AppData\Roaming\Telegram Desktop\Telegram.exe" />
                    <App DesktopAppPath="C:\Users\work\AppData\Roaming\Telegram Desktop\Signal.exe" />
                    <App DesktopAppPath="C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" />
                    <App DesktopAppPath="C:\Program Files\TeamViewer\TeamViewer.exe" />
                    <App DesktopAppPath="C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" />
                    <App DesktopAppPath="C:\Program Files\Google\Chrome\Application\chrome.exe" />
                </AllowedApps>
            </AllAppsList>
            <v2:FileExplorerNamespaceRestrictions>
                <v2:AllowedNamespace Name="Downloads"/>
            </v2:FileExplorerNamespaceRestrictions>
            <StartLayout>
                <![CDATA[<LayoutModificationTemplate xmlns:defaultlayout="http://schemas.microsoft.com/Start/2014/FullDefaultLayout" xmlns:start="http://schemas.microsoft.com/Start/2014/StartLayout" Version="1" xmlns="http://schemas.microsoft.com/Start/2014/LayoutModification">
                      <LayoutOptions StartTileGroupCellWidth="6" />
                      <DefaultLayoutOverride>
                        <StartLayoutCollection>
                          <defaultlayout:StartLayout GroupCellWidth="6">
                            <start:Group Name="start from here">
                              <start:DesktopApplicationTile Size="2x2" Column="0" Row="0" DesktopApplicationLinkPath="C:\Users\work\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Telegram Desktop\Telegram.lnk" />
                              <start:Tile Size="2x2" Column="2" Row="0" AppUserModelID="5319275A.WhatsAppDesktop_cv1g1gvanyjgm!App" />
                              <start:DesktopApplicationTile Size="2x2" Column="4" Row="0" DesktopApplicationLinkPath="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype\Skype.lnk" />
                              <start:DesktopApplicationTile Size="2x2" Column="0" Row="2" DesktopApplicationLinkPath="C:\Users\work\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Signal.lnk" />
                              <start:DesktopApplicationTile Size="2x2" Column="2" Row="2" DesktopApplicationID="org.openvpn.client" />
                              <start:DesktopApplicationTile Size="2x2" Column="4" Row="2" DesktopApplicationID="{6D809377-6AF0-444B-8957-A3773F02200E}\TeamViewer\TeamViewer.exe" />
                              <start:DesktopApplicationTile Size="2x2" Column="0" Row="4" DesktopApplicationID="Microsoft.Windows.Explorer" />
                              <start:Tile Size="2x2" Column="2" Row="4" AppUserModelID="windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel" />
                            </start:Group>
                            <start:Group Name="Browser">
                              <start:DesktopApplicationTile Size="2x2" Column="0" Row="0" DesktopApplicationID="MSEdge" />
                              <start:DesktopApplicationTile Size="2x2" Column="2" Row="0" DesktopApplicationLinkPath="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brave.lnk" />
                              <start:DesktopApplicationTile Size="2x2" Column="4" Row="0" DesktopApplicationLinkPath="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk" />
                            </start:Group>
                            <start:Group Name="Microsoft Office">
                              <start:DesktopApplicationTile Size="2x2" Column="0" Row="0" DesktopApplicationLinkPath="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word.lnk" />
                              <start:DesktopApplicationTile Size="2x2" Column="2" Row="0" DesktopApplicationLinkPath="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk" />
                              <start:DesktopApplicationTile Size="2x2" Column="4" Row="0" DesktopApplicationLinkPath="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook.lnk" />
                              <start:DesktopApplicationTile Size="2x2" Column="0" Row="2" DesktopApplicationLinkPath="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk" />
                            </start:Group>
                          </defaultlayout:StartLayout>
                        </StartLayoutCollection>
                      </DefaultLayoutOverride>
                    </LayoutModificationTemplate>
                ]]>
            </StartLayout>
            <Taskbar ShowTaskbar="true"/>
        </Profile>
    </Profiles>
    <Configs>
        <Config>
            <Account>work</Account>
            <DefaultProfile Id="{5B328106-BD89-2863-AB27-6ED6EE355682}"/>
        </Config>
    </Configs>
</AssignedAccessConfiguration>

有没有中文支持呀？

yuan huang 40 Reputation points

2023-06-20T07:40:34.44+00:00

When I tested, randomly configured a kiosk mode, using edge in mode, there are such problems, can not download.zip.docx.xlsx files, etc.

but you can download files normally after exiting kiosk mode.

Accepted answer

1 additional answer

Your answer

Anonymous

2023-06-19T08:39:26.29+00:00

Hi @yuan huang,

Based on your description, are you referring to Use kiosk mode features?Could you provide more details so that we can reproduce this issue? This will help to solve the issue. Thank you for your understanding.
yuan huang 40 Reputation points

2023-06-20T07:40:34.44+00:00

When I tested, randomly configured a kiosk mode, using edge in mode, there are such problems, can not download.zip.docx.xlsx files, etc.

but you can download files normally after exiting kiosk mode.

Answer 1

Hi @yuan huang,

Currectly Q&A only support English, and please do not post any personal information in the post, for security reasons.

For the issue you mentioned, this appears to be a known issue, and you can try this workaround and check if this work for you:

Multi-app Kiosk

Multi-app kiosks can be configured with local, AD or AAD user accounts, as described here.

The following steps target multi-app kiosks setup with local user accounts:

In the kiosk device, login with the local admin user
Take note of the kiosk user local account and replace below
Open an elevated command prompt and type the following command:

wmic useraccount where name='<kioskUserLocalAccount>' get sid

Take note of the SID in the output
In the elevated command prompt, type the following command:

Robocopy C:\Windows\System32\GroupPolicyUsers\S-1-5-32-545 C:\Windows\System32\GroupPolicyUsers\<SID_obtained_from_wmic_output> /mir

Open File Explorer and access the following folder:

C:\Windows\System32\GroupPolicyUsers\<SID_obtained_from_wmic_output>\User\

Rename the Registry.pol file in this folder to Registry_old.pol
Copy the supplied Registry.pol file to this location
Log in with the kiosk user account or simply restart the device for changes to take effect

For multi-app kiosks using AD or AAD accounts, the restrictive settings can be modified using domain GPO/Intune, targeting the following policy settings:

GPS: Default risk level for file attachments (gpsearch.azurewebsites.net) - Set to Disable
GPS: Inclusion list for low file types (gpsearch.azurewebsites.net) - Set to Disable

With this configuration, Edge will be able to download the most common file types. High risk file types as described at Information about the Attachment Manager in Microsoft Windows will still be blocked from being downloaded in the kiosk environment. To see the list, scroll down until you see

Optionally, if the customer would like to generate their own modified Registry.pol file instead, here at the instructions:

Download the LGPO tool at Download Microsoft Security Compliance Toolkit 1.0 from Official Microsoft Download Center
Extract the tool locally and place the regpol.txt file in the same folder. Feel free to review the settings that will be used to generate the Registry.pol file
Open a command prompt and type:

LGPO.exe /r regpol.txt /w Registry.pol

Then use the generated Registry.pol file with the steps above

The regpol.txt is also attached to this top issue but it should only be supplied (along with the previous steps) if the customer expresses interest in generating the modified Registry.pol file by themselves.

Best regards,

Xudong Peng

If the answer is the right solution, please click "Accept Answer" and kindly upvote. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

yuan huang 40 Reputation points

2023-06-21T01:54:49.0533333+00:00

I modified the policy entry to solve the problem:

[HKEY_USERS\S-1-5-21-896806123-1825596054-2101291526-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Associations]

"LowRiskFileTypes"=".pdf;.epub;.doc;.docx;.csv;.xlsx;.zip;.tar;.gz;.tar.gz;.rar"

Answer 2

yuan huang 40

Is there a god out there who knows how to fix this?

Share via

Using edge in multi-app booth mode(kiosk mode), I couldn't download.docx.xlsx .zip and other files...

1 additional answer

Your answer