Kiosk Mode Settings for Mobile Devices in Configuration Manager
Updated: May 14, 2015
Applies To: System Center 2012 Configuration Manager SP2, System Center 2012 R2 Configuration Manager SP1
The information in this topic applies to System Center 2012 Configuration Manager SP1 or later, and System Center 2012 R2 Configuration Manager or later.
Configuration Manager kiosk mode allows you to lock a managed mobile device to only allow certain features to work. For example, you can allow a device to only run one managed app that you specify, or you can disable the volume buttons on a device. These settings might be used for a demonstration model of a device, or a device that is dedicated to performing only one function, such as a point of sale device.
Kiosk mode settings are configured in a mobile device configuration item. To get started creating this type of configuration item, see How to Create Mobile Device Configuration Items for Compliance Settings in Configuration Manager.
Kiosk Mode for iOS Devices
Before you can configure an iOS device for kiosk mode, you must use the Apple Configurator Tool to put the device into supervised mode. For more information, see your Apple documentation.
If the iOS app you specify is installed after you deploy the configuration policy, the device will not enter kiosk mode until after it is restarted.
On the Configure Kiosk Mode Settings for iOS Devices page of the Create Configuration Item Wizard, specify the following information:
Select the app that will be allowed to run when the device is in kiosk mode. No other apps will be allowed to run on the device. Choose from:
Managed App – Click Browse, then select a managed app.
Store App – specify the URL to an app on the app store then click Get App ID to populate the App ID field.
To find the app URL:
Using a search engine, find the app you want to use in the iTunes App Store and open the page for the app.
Copy the URL of the page and use this as the URL to specify the app you want to run in kiosk mode.
Example: Search for Microsoft Word for iPad. The URL you use will be https://itunes.apple.com/us/app/microsoft-word-for-ipad/id586447913?mt=8.
Enables or disables the touch screen on the device.
Enables or disables changing the screen orientation when you rotate the device.
Enables or disables the use of the volume buttons on the device.
Enables or disables the ringer (mute) switch on the device.
Screen sleep and wake button
Enables or disables the screen sleep wake button on the device.
Enables or disables automatic locking of the device.
Enables or disables the accessibility setting Mono audio.
Enables or disables the accessibility setting VoiceOver which reads aloud text on the device display.
Voice over adjustments
Enables or disables voiceover adjustments which let you adjust the VoiceOver function (for example, how fast on-screen text is read aloud).
Enables or disables the Zoom accessibility setting which lets you use touch to zoom into the device display.
Enables or disables zoom adjustments which let you adjust the zoom function.
Enables or disables the Invert Colors accessibility setting which adjusts the display to help users with visual impairments.
Invert colors adjustments
Enables or disables invert colors adjustments which let you adjust the invert colors function.
Enables or disables the Assistive Touch accessibility setting which helps users perform on screen gestures which might be difficult for them to perform.
Assistive touch adjustments
Enables or disables assistive touch adjustments which let you adjust the assistive touch function.
Enables or disables the Speak Selection accessibility settings which can read aloud the text you select.
Remediate noncompliant settings
Select if you want to remediate noncompliant configuration settings (when supported).
Noncompliance severity for reports
Specify the severity level that is reported if this compliance policy is evaluated as noncompliant. The available severity levels are the following:
None Devices that fail this compliance rule do not report a failure severity for Configuration Manager reports.
Information Devices that fail this compliance rule report a failure severity of Information for Configuration Manager reports.
Warning Devices that fail this compliance rule report a failure severity of Warning for Configuration Manager reports.
Critical Devices that fail this compliance rule report a failure severity of Critical for Configuration Manager reports.
Critical with event Devices that fail this compliance rule report a failure severity of Critical for Configuration Manager reports. This severity level is also be logged as a Windows event in the application event log.
When you are finished, click Next.
Complete the Create Configuration Item Wizard with any other settings you require.
Once you are done, use the information in How to Create Configuration Baselines for Compliance Settings in Configuration Manager to add the configuration item to a configuration baseline.
Then, deploy the configuration baseline to the required devices. For details, see How to Deploy Configuration Baselines in Configuration Manager.
Finally, you can monitor the success of the configuration baseline by using the information in How to Monitor for Compliance Settings in Configuration Manager.