Multi App kiosk policy with a custom xml

Question

Hey,

I have a question.

I have created a policy for multi-kiosk app in Intune with a custom xml.

• The policy is assigned to a group of devices.
• configured group accounts. (users who log into the devices that has multi app kiosk policy must belong to a Microsoft Entra Group) see how I configured the group account on the config section of the xml.

Here is a custom xml, I created.

<?xml version="1.0" encoding="utf-8" ?>

<AssignedAccessConfiguration

xmlns="https://schemas.microsoft.com/AssignedAccess/2017/config"

xmlns:rs5="http://schemas.microsoft.com/AssignedAccess/201810/config"

xmlns:v4="http://schemas.microsoft.com/AssignedAccess/2021/config"

>

<Profiles>

<Profile Id="{D98BF21A-B420-4BB8-A201-746E42B2CB33}">

<AllAppsList>

<AllowedApps>

<App AppUserModelId="Microsoft.WindowsCalculator_8wekyb3d8bbwe!App" />

<App DesktopAppPath="C:\Windows\System32\notepad.exe" />

</AllowedApps>

</AllAppsList>

<StartLayout>

<![CDATA[<LayoutModificationTemplate xmlns:defaultlayout="http://schemas.microsoft.com/Start/2014/FullDefaultLayout" xmlns:start="http://schemas.microsoft.com/Start/2014/StartLayout" Version="1" xmlns="http://schemas.microsoft.com/Start/2014/LayoutModification">

<LayoutOptions StartTileGroupCellWidth="6" />

<DefaultLayoutOverride>

<StartLayoutCollection>

<defaultlayout:StartLayout GroupCellWidth="6">

<start:Group Name="Group1">

<start:Tile Size="4x2" Column="0" Row="0" AppUserModelID="Microsoft.WindowsCalculator_8wekyb3d8bbwe!App" />

</start:Group>

<start:Group Name="Group2">

<start:DesktopApplicationTile Size="2x2" Column="0" Row="0" DesktopApplicationID="{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\notepad.exe" />

</start:Group>

</defaultlayout:StartLayout>

</StartLayoutCollection>

</DefaultLayoutOverride>

</LayoutModificationTemplate>

]]>

</StartLayout>

<Taskbar ShowTaskbar="true"/>

</Profile>

</Profiles>

<Configs>

<Config>

<UserGroup Type="AzureActiveDirectoryGroup" Name="4bfef1cc-0899-432f-b7b1-df0695d8aeaa" />

<DefaultProfile Id="{D98BF21A-B420-4BB8-A201-746E42B2CB33}"/>

</Config>

</Configs>

</AssignedAccessConfiguration>

OMA-URI: ./Device/Vendor/MSFT/AssignedAccess/Configuration

Here is the error intune is returning.

Configuration [./Device/Vendor/MSFT/AssignedAccess/Configuration]

ERROR CODE

0x87d101f4

Answer 1

@Pacifique Kamugisha, Thanks for posting in Q&A.

To clarify this issue, here are some information you can check.

1.Please check that your device meets the specific version requirements and that the relevant patches have been applied in certain versions.

https://learn.microsoft.com/en-us/windows/client-management/mdm/assignedaccess-csp#configuration

2.The format of the xml file is also very important, please check that it is formatted correctly and that it complies with the corresponding version requirements.

3.Please tell us the operating system version of your device.

If there is any update, feel free to let me know.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Hello @ZhoumingDuan-MSFT , the device has Windows 10 enterprise Version 19045