Kiosk Mode Settings for Mobile Devices in Configuration Manager
Updated: May 14, 2015
Applies To: System Center 2012 Configuration Manager SP2, System Center 2012 R2 Configuration Manager SP1
Note
The information in this topic applies to System Center 2012 Configuration Manager SP1 or later, and System Center 2012 R2 Configuration Manager or later.
Configuration Manager kiosk mode allows you to lock a managed mobile device to only allow certain features to work. For example, you can allow a device to only run one managed app that you specify, or you can disable the volume buttons on a device. These settings might be used for a demonstration model of a device, or a device that is dedicated to performing only one function, such as a point of sale device.
Kiosk mode settings are configured in a mobile device configuration item. To get started creating this type of configuration item, see How to Create Mobile Device Configuration Items for Compliance Settings in Configuration Manager.
Kiosk Mode for iOS Devices
Note
-
Before you can configure an iOS device for kiosk mode, you must use the Apple Configurator Tool to put the device into supervised mode. For more information, see your Apple documentation.
-
If the iOS app you specify is installed after you deploy the configuration policy, the device will not enter kiosk mode until after it is restarted.
-
On the Configure Kiosk Mode Settings for iOS Devices page of the Create Configuration Item Wizard, specify the following information:
Setting
More information
Select App
Select the app that will be allowed to run when the device is in kiosk mode. No other apps will be allowed to run on the device. Choose from:
Managed App – Click Browse, then select a managed app.
Store App – specify the URL to an app on the app store then click Get App ID to populate the App ID field.
To find the app URL:
Using a search engine, find the app you want to use in the iTunes App Store and open the page for the app.
Copy the URL of the page and use this as the URL to specify the app you want to run in kiosk mode.
Example: Search for Microsoft Word for iPad. The URL you use will be https://itunes.apple.com/us/app/microsoft-word-for-ipad/id586447913?mt=8.
Touch
Enables or disables the touch screen on the device.
Screen rotation
Enables or disables changing the screen orientation when you rotate the device.
Volume buttons
Enables or disables the use of the volume buttons on the device.
Ringer switch
Enables or disables the ringer (mute) switch on the device.
Screen sleep and wake button
Enables or disables the screen sleep wake button on the device.
Auto lock
Enables or disables automatic locking of the device.
Mono audio
Enables or disables the accessibility setting Mono audio.
Voice over
Enables or disables the accessibility setting VoiceOver which reads aloud text on the device display.
Voice over adjustments
Enables or disables voiceover adjustments which let you adjust the VoiceOver function (for example, how fast on-screen text is read aloud).
Zoom
Enables or disables the Zoom accessibility setting which lets you use touch to zoom into the device display.
Zoom adjustments
Enables or disables zoom adjustments which let you adjust the zoom function.
Invert colors
Enables or disables the Invert Colors accessibility setting which adjusts the display to help users with visual impairments.
Invert colors adjustments
Enables or disables invert colors adjustments which let you adjust the invert colors function.
Assistive touch
Enables or disables the Assistive Touch accessibility setting which helps users perform on screen gestures which might be difficult for them to perform.
Assistive touch adjustments
Enables or disables assistive touch adjustments which let you adjust the assistive touch function.
Speech selection
Enables or disables the Speak Selection accessibility settings which can read aloud the text you select.
Remediate noncompliant settings
Select if you want to remediate noncompliant configuration settings (when supported).
Noncompliance severity for reports
Specify the severity level that is reported if this compliance policy is evaluated as noncompliant. The available severity levels are the following:
None Devices that fail this compliance rule do not report a failure severity for Configuration Manager reports.
Information Devices that fail this compliance rule report a failure severity of Information for Configuration Manager reports.
Warning Devices that fail this compliance rule report a failure severity of Warning for Configuration Manager reports.
Critical Devices that fail this compliance rule report a failure severity of Critical for Configuration Manager reports.
Critical with event Devices that fail this compliance rule report a failure severity of Critical for Configuration Manager reports. This severity level is also be logged as a Windows event in the application event log.
-
When you are finished, click Next.
-
Complete the Create Configuration Item Wizard with any other settings you require.
Next Steps
Once you are done, use the information in How to Create Configuration Baselines for Compliance Settings in Configuration Manager to add the configuration item to a configuration baseline.
Then, deploy the configuration baseline to the required devices. For details, see How to Deploy Configuration Baselines in Configuration Manager.
Finally, you can monitor the success of the configuration baseline by using the information in How to Monitor for Compliance Settings in Configuration Manager.