How to setup kiosk device on Windows machine? What are ways to do it with single and multiple apps on kiosk device?

Question

How to setup kiosk device on Windows machine? What are ways to do it with single and multiple apps on kiosk device?

Vinod Survase 4,811

Answer accepted by question author

0 additional answers

Your answer

Answer 1

Crystal-MSFT 54,216 Microsoft External Staff

@Vinod Survase, Thanks for posting in Q&A. On Windows devices, we can use Intune to run devices as a kiosk, sometimes known as a dedicated device. A device in kiosk mode can run one app, or run many apps.

You can create a Windows kiosk device configuration profile to configure it and assign it to the device group you want. Here is a link with more details for your reference:

https://learn.microsoft.com/en-us/mem/intune/configuration/kiosk-settings-windows

Hope the above information can help.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Crystal-MSFT 54,216 Reputation points Microsoft External Staff

2023-06-30T05:29:57.3633333+00:00

@Vinod Survase, Hope the above information can help. If there's still anything else we can help, feel free to let us know.
Vinod Survase 4,811 Reputation points

2023-06-30T09:58:04.9033333+00:00

@Crystal-MSFT

Thanks for sharing info. I will check and let you know if anything is required.
Crystal-MSFT 54,216 Reputation points Microsoft External Staff

2023-07-03T02:32:35.2566667+00:00

@Vinod Survase, Thanks for the reply. If anything we can help, feel free to let us know.
Vinod Survase 4,811 Reputation points

2023-07-03T18:16:06.97+00:00

@Crystal-MSFT

I wanted to know how we enroll the brand new device to Intune with multi app kiosk ? I bit confuse here as I know the way where we need to create a Azure AD account but what about when we wanted to create local user account and use it for running the apps using that account and make that device as kiosk in office and any other remote site.

Also how to enroll and make it available with Azure AD account as well? Please let me know in both way so that I can decide and work on this ASAP.
Crystal-MSFT 54,216 Reputation points Microsoft External Staff

2023-07-04T01:56:51.1133333+00:00

@Vinod Survase, Thanks for the reply. For kiosk device, you can use windows automatic enrollment such as bulk enroll, Autopilot self-deploying enrollment method to enroll the devices. Here is a link with more details for your reference:

https://learn.microsoft.com/en-us/mem/intune/fundamentals/deployment-guide-enrollment-windows#windows-automatic-enrollment

For the local account, it is used to login windows. To use app like office related apps, you still need to use related account with related license. This is separate.
Vinod Survase 4,811 Reputation points

2023-07-04T17:30:12.4266667+00:00

@Crystal-MSFT

Thanks for your reply. Do you mean we can use Autopilot for enrolling device to Intune? But I believe we would need a Azure AD user account for that and then make it possible.
Crystal-MSFT 54,216 Reputation points Microsoft External Staff

2023-07-05T01:52:59.2933333+00:00

@Vinod Survase, Thanks for the reply. Yes, we can use Autopilot self-deploying mode to enroll these devices.

https://learn.microsoft.com/en-us/mem/autopilot/self-deploying

And this mode doesn't need any Azure AD user account. But it needs device license.

https://learn.microsoft.com/en-us/mem/intune/fundamentals/licenses#device-only-licenses
Vinod Survase 4,811 Reputation points

2023-07-06T09:41:28.08+00:00

@Crystal-MSFT

Thanks for your reply.

We wanted to create multi app kiosk device for Firstline workers in the facility so how we can do this?

Can you share this scenario specific details?
Vinod Survase 4,811 Reputation points

2023-07-06T09:41:43.24+00:00

@Crystal-MSFT

Thanks for your reply.

We wanted to create multi app kiosk device for Firstline workers in the facility so how we can do this?

Can you share this scenario specific details?
Crystal-MSFT 54,216 Reputation points Microsoft External Staff

2023-07-07T01:59:18.4333333+00:00

@Vinod Survase, Thanks for the reply. As Autopilot self-deploying mode has device requirement, please ensure the device has TPM 2.0 and also support TPM device attestation. If these devices are met, we can follow the steps in the link below to do Autopilot self-deploying:

https://learn.microsoft.com/en-us/mem/autopilot/tutorial/self-deploying/self-deploying-automatic-enrollment

For the device license, you can contact our license support to purchase:

https://learn.microsoft.com/en-us/licensing/licensing-orders-invoices-payments-support

Hope the above information can help.
Vinod Survase 4,811 Reputation points

2023-07-12T09:14:14.6866667+00:00

@Crystal-MSFT

Which license we need to get this done? How we check whether device has TPM 2.0 and support TPM device attestation?

Any commands or way to check this?
Crystal-MSFT 54,216 Reputation points Microsoft External Staff

2023-07-13T02:48:35.9766667+00:00

@Vinod Survase, Thanks for the reply. For self-deploying mode, device license is needed. And to check if the device has TPM 2.0, you can check it via TPM.msc or using the wmic command in the following link:

https://support.microsoft.com/en-us/windows/enable-tpm-2-0-on-your-pc-1fd5a332-360d-4f46-a1e7-ae6b0c90645c

https://www.prajwaldesai.com/check-tpm-status-command-line/

Note: non-Microsoft link, just for the reference.

To check if the device support TPM attestation, you can use PowerShell command "Get-TpmSupportedFeature -FeatureList "Key Attestation""

https://learn.microsoft.com/en-us/powershell/module/trustedplatformmodule/get-tpmsupportedfeature?view=windowsserver2022-ps#example-1-verify-support-for-key-attestation
Vinod Survase 4,811 Reputation points

2023-07-13T14:08:58.94+00:00

@Crystal-MSFT

Which license we need to get for this? EMS or what?
Vinod Survase 4,811 Reputation points

2023-07-13T14:09:56.8+00:00

@Crystal-MSFT

Which license we need to get for this? EMS or what? Also for testing do we need TPM 2.0 and Key Attestation as well or what?
Crystal-MSFT 54,216 Reputation points Microsoft External Staff

2023-07-14T01:49:55.99+00:00

@Vinod Survase, Thanks for the reply. No, the device license is different. You need to buy separately. And for Autopilot self-deploying test, yes, the TPM 2.0 and Key Attestation are needed.
Vinod Survase 4,811 Reputation points

2023-07-14T17:28:33.1133333+00:00

@Crystal-MSFT

Thanks for reply.

What license you are referring I really did not understand ? Can you share the link or any docs where it is clearly mentioned which license is required for device for this do work as Kiosk device? As we need to get this done ASAP?
Crystal-MSFT 54,216 Reputation points Microsoft External Staff

2023-07-17T02:28:43.26+00:00

@Vinod Survase, Here is the doc which mentioned this for your reference:

https://techcommunity.microsoft.com/t5/microsoft-intune-blog/microsoft-intune-announces-device-only-subscription-for-shared/ba-p/280817
Vinod Survase 4,811 Reputation points

2023-07-18T07:19:27.28+00:00

@Crystal-MSFT

Thanks for reply.
Vinod Survase 4,811 Reputation points

2023-07-18T07:19:42.42+00:00

.....
Vinod Survase 4,811 Reputation points

2023-07-19T12:03:07.94+00:00

@Crystal-MSFT

I have checked this docs and contacted MS Support but I am not getting correct info as this docs says if we want to get or use Kiosk device without any dedicated user then we need to get device only license for that to use for that kiosk device.

https://techcommunity.microsoft.com/t5/microsoft-intune-blog/microsoft-intune-announces-device-only-subscription-for-shared/ba-p/280817
Crystal-MSFT 54,216 Reputation points Microsoft External Staff

2023-07-20T02:13:38.9566667+00:00

@Vinod Survase, Thanks for the reply. From your description, it seems you get different information from MS support. Could you let us know what is the information?
Vinod Survase 4,811 Reputation points

2023-07-21T12:35:12.46+00:00

@Crystal-MSFT

I got the info from Intune support team that we should buy a MS Intune Plan 1 device only license for Kiosk device. I have acquired a above said license but still its not working as expected. Also I followed all the kiosk device document for configuration profiles and policies but still no luck there.
Crystal-MSFT 54,216 Reputation points Microsoft External Staff

2023-07-24T06:02:29.75+00:00

@Vinod Survase, Thanks for your reply. I notice it's not working as expected. Could you let us know if we have any error received?
Vinod Survase 4,811 Reputation points

2023-07-24T18:15:48.7+00:00

@Crystal-MSFT

Thanks for your reply. I was able to deploy the kiosk profile on device and its working but now deployed apps are not showing correctly and not responsive when I click on any app that is deployed on that kiosk profile its not opening at all.

See below configuration

Also see the device where it shows like that and not opening any of the deployed apps.
Vinod Survase 4,811 Reputation points

2023-07-24T18:19:28.36+00:00

@Crystal-MSFT

Also not able to add Store apps, Win32 apps and AUMID apps when I add it it does not show up and does not work at all.
Crystal-MSFT 54,216 Reputation points Microsoft External Staff

2023-07-25T01:43:09.77+00:00

@Vinod Survase, Thanks for the reply. To show these apps on the device, we need to deploy these apps to the device firstly. Could you confirm if the apps are deployed to the device and if they are installed on the device successfully?
Vinod Survase 4,811 Reputation points

2023-07-25T06:31:47.8833333+00:00

@Crystal-MSFT

Yes we have deployed all the required apps on that device already. Can you tell me how to setup/configure the apps in this kiosk profile so it will show-up and work for us?
Crystal-MSFT 54,216 Reputation points Microsoft External Staff

2023-07-26T02:21:18.3766667+00:00

@Vinod Survase, Thanks for the reply. To add the app into kiosk multi app, we need to select the app deployed and installed via Intune. For example, if we deploy a win32 app via Intune and the app is installed on the device side, then we will select the win32 app we deployed under mult-app kiosk.

If we already done like that, but the app is still not shown. I think it needs to do log analysis to find the issue. With Q&A limitation with log analysis, I suggest to open case to troubleshoot this.
Vinod Survase 4,811 Reputation points

2023-07-26T09:43:32.05+00:00

@Crystal-MSFT

Thanks.

I have already opened a case with MS and one of engineer is working on it but so far no solution on it yet.
Crystal-MSFT 54,216 Reputation points Microsoft External Staff

2023-07-27T02:53:41.3766667+00:00

@Vinod Survase, Thanks for the reply. Log analysis needs much time. If there's any solution you can get, I appreciate your help to share it here. Thanks!
Vinod Survase 4,811 Reputation points

2023-07-28T13:46:28.31+00:00

@Crystal-MSFT

Sure, I will share the steps or solution here

Share via

How to setup kiosk device on Windows machine? What are ways to do it with single and multiple apps on kiosk device?

0 additional answers

Your answer