Why my new XML file to Kisok mode do not work?

Emanuel Nogueira 0 Pontos de reputação
2025-08-13T14:26:27.98+00:00

I am setting up a multi-app kiosk mode on machines running Windows 10 IoT Enterprise 21H2. My goal is to allow a specific list of desktop applications while also restricting File Explorer access so that users can only save and open files within the Downloads folder.

I have one XML file (QuiosqueBibliotecaESUFRN.xml) that works perfectly. It configures the kiosk with all the necessary apps but does not include any folder restrictions.

The problem occurs when I try to create a second version of the file (XMLKiosk.xml) to add the restriction for the Downloads folder. When I attempt to apply the provisioning package with this new XML, the configuration simply fails without providing a specific error message.

File 1: QuiosqueBibliotecaESUFRN.xml (Working)

This file successfully configures the Start Menu layout and the list of allowed apps.

<?xml version="1.0" encoding="utf-8"?>
<AssignedAccessConfiguration xmlns:v2="http://schemas.microsoft.com/AssignedAccess/201810/config" xmlns="http://schemas.microsoft.com/AssignedAccess/2017/config">
  <Profiles>
    <Profile Id="{4FF2FA2B-6597-417C-A1F1-BA81B3FAEF93}">
      <AllAppsList>
        <AllowedApps>
          <App DesktopAppPath="C:\Program Files\R\R-4.5.1\bin\x64\Rgui.exe" />
          <App DesktopAppPath="C:\Program Files\RStudio\rstudio.exe" />
          <App DesktopAppPath="C:\Program Files\TabWin\Programas TAB\TabWin\TAB415\TabWin415.exe" />
          <App DesktopAppPath="C:\Program Files\QGIS 3.44.0\bin\qgis-bin.exe" />
          <App DesktopAppPath="C:\Program Files\TerraView-5.7.1\bin\terraview.exe" />
          <App DesktopAppPath="C:\Program Files\EPI_Info_7\Launch Epi Info 7.exe" />
          <App DesktopAppPath="C:\Program Files\7-Zip\7zFM.exe" />
          <App DesktopAppPath="C:\Windows\system32\win32calc.exe" />
          <App DesktopAppPath="C:\Windows\system32\notepad.exe" />
          <App DesktopAppPath="C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" />
          <App DesktopAppPath="C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" />
          <App DesktopAppPath="C:\Program Files\ONLYOFFICE\DesktopEditors\DesktopEditors.exe" />
          <App DesktopAppPath="C:\Program Files\IRaMuTeQ-0.8a7\iramuteq-0.8a7.exe" />
        </AllowedApps>
      </AllAppsList>
      <StartLayout><![CDATA[<LayoutModificationTemplate xmlns:defaultlayout="http://schemas.microsoft.com/Start/2014/FullDefaultLayout" Version="1" xmlns:start="http://schemas.microsoft.com/Start/2014/StartLayout" xmlns="http://schemas.microsoft.com/Start/2014/LayoutModification">
  <LayoutOptions StartTileGroupCellWidth="6" />
  <DefaultLayoutOverride>
    <StartLayoutCollection>
      <defaultlayout:StartLayout GroupCellWidth="6">
        <start:Group Name="">
          <start:DesktopApplicationTile Size="2x2" Column="0" Row="0" DesktopApplicationLinkPath="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\R\R 4.5.1.lnk" />
          <start:DesktopApplicationTile Size="2x2" Column="0" Row="2" DesktopApplicationLinkPath="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RStudio.lnk" />
          <start:DesktopApplicationTile Size="2x2" Column="2" Row="0" DesktopApplicationLinkPath="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TabWin415.lnk" />
          <start:DesktopApplicationTile Size="2x2" Column="4" Row="0" DesktopApplicationLinkPath="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QGIS 3.44.0\QGIS Desktop 3.44.0.lnk" />
          <start:DesktopApplicationTile Size="2x2" Column="4" Row="2" DesktopApplicationLinkPath="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TerraView-5.7.1 (Win64)\TerraView 5.7.1 (Win64).lnk" />
          <start:DesktopApplicationTile Size="2x2" Column="2" Row="2" DesktopApplicationLinkPath="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPI_Info_7.lnk" />
        </start:Group>
        <start:Group Name="Ferramentas">
          <start:DesktopApplicationTile Size="2x2" Column="0" Row="0" DesktopApplicationLinkPath="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip\7-Zip File Manager.lnk" />
          <start:DesktopApplicationTile Size="2x2" Column="0" Row="2" DesktopApplicationLinkPath="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Calculator.lnk" />
          <start:DesktopApplicationTile Size="2x2" Column="2" Row="2" DesktopApplicationLinkPath="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Notepad.lnk" />
          <start:DesktopApplicationTile Size="2x2" Column="4" Row="2" DesktopApplicationLinkPath="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VLC media player.lnk" />
          <start:DesktopApplicationTile Size="2x2" Column="4" Row="0" DesktopApplicationLinkPath="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk" />
          <start:DesktopApplicationTile Size="2x2" Column="2" Row="0" DesktopApplicationLinkPath="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ONLYOFFICE\ONLYOFFICE.lnk" />
        </start:Group>
        <start:Group Name="-">
          <start:DesktopApplicationTile Size="2x2" Column="0" Row="0" DesktopApplicationLinkPath="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IRaMuTeQ-0.8a7.lnk" />
        </start:Group>
      </defaultlayout:StartLayout>
    </StartLayoutCollection>
  </DefaultLayoutOverride>
</LayoutModificationTemplate>]]></StartLayout>
      <Taskbar ShowTaskbar="true" />
    </Profile>
  </Profiles>
  <Configs>
    <Config>
      <Account>ESUFRN</Account>
      <DefaultProfile Id="{4FF2FA2B-6597-417C-A1F1-BA81B3FAEF93}" />
    </Config>
  </Configs>
</AssignedAccessConfiguration>

File 2: XMLKiosk.xml (Failing)

In this version, I added explorer.exe to the allowed apps list and included the <v2:FileExplorerNamespaceRestrictions> section to limit access to the Downloads folder. This is the version that fails to apply.

<?xml version="1.0" encoding="utf-8"?>
<AssignedAccessConfiguration xmlns:v2="http://schemas.microsoft.com/AssignedAccess/201810/config" xmlns="http://schemas.microsoft.com/AssignedAccess/2017/config">
  <Profiles>
    <Profile Id="{1E72DA1B-1856-4D48-9A9A-C9483037D004}">
      <AllAppsList>
        <AllowedApps>
          <App DesktopAppPath="C:\Program Files\7-Zip\7zFM.exe" />
          <App DesktopAppPath="C:\Windows\system32\win32calc.exe" />
          <App DesktopAppPath="C:\Windows\system32\notepad.exe" />
          <App DesktopAppPath="C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" />
          <App DesktopAppPath="C:\Program Files\ONLYOFFICE\DesktopEditors\DesktopEditors.exe" />
          <App DesktopAppPath="C:\Windows\explorer.exe" />
          <App DesktopAppPath="C:\Program Files\EPI_Info_7\Launch Epi Info 7.exe" />
          <App DesktopAppPath="C:\Program Files\IRaMuTeQ-0.8a7\iramuteq-0.8a7.exe" />
          <App DesktopAppPath="C:\Program Files\QGIS 3.44.0\bin\qgis-bin.exe" />
          <App DesktopAppPath="C:\Program Files\R\R-4.5.1\bin\x64\Rgui.exe" />
          <App DesktopAppPath="C:\Program Files\RStudio\rstudio.exe" />
          <App DesktopAppPath="C:\Program Files\TabWin\Programas TAB\TabWin\TAB415\TabWin415.exe" />
          <App DesktopAppPath="C:\Program Files\TerraView-5.7.1\bin\terraview.exe" />
          <App DesktopAppPath="C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" />
        </AllowedApps>
      </AllAppsList>
      <StartLayout><![CDATA[<LayoutModificationTemplate xmlns:defaultlayout="http://schemas.microsoft.com/Start/2014/FullDefaultLayout" Version="1" xmlns:start="http://schemas.microsoft.com/Start/2014/StartLayout" xmlns="http://schemas.microsoft.com/Start/2014/LayoutModification">
  <LayoutOptions StartTileGroupCellWidth="6" />
  <DefaultLayoutOverride>
    <StartLayoutCollection>
      <defaultlayout:StartLayout GroupCellWidth="6">
        <start:Group Name="Ferramentas">
          <start:DesktopApplicationTile Size="2x2" Column="0" Row="0" DesktopApplicationLinkPath="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip\7-Zip File Manager.lnk" />
          <start:DesktopApplicationTile Size="2x2" Column="2" Row="0" DesktopApplicationLinkPath="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Calculator.lnk" />
          <start:DesktopApplicationTile Size="2x2" Column="4" Row="0" DesktopApplicationLinkPath="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Notepad.lnk" />
          <start:DesktopApplicationTile Size="2x2" Column="0" Row="2" DesktopApplicationLinkPath="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk" />
          <start:DesktopApplicationTile Size="2x2" Column="2" Row="2" DesktopApplicationLinkPath="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ONLYOFFICE\ONLYOFFICE.lnk" />
          <start:DesktopApplicationTile Size="2x2" Column="4" Row="2" DesktopApplicationLinkPath="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Explorer.lnk" />
        </start:Group>
        <start:Group Name="Softwares">
          <start:DesktopApplicationTile Size="2x2" Column="0" Row="0" DesktopApplicationLinkPath="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPI_Info_7.lnk" />
          <start:DesktopApplicationTile Size="2x2" Column="0" Row="2" DesktopApplicationLinkPath="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IRaMuTeQ-0.8a7.lnk" />
          <start:DesktopApplicationTile Size="2x2" Column="2" Row="0" DesktopApplicationLinkPath="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QGIS 3.44.0\QGIS Desktop 3.44.0.lnk" />
          <start:DesktopApplicationTile Size="2x2" Column="2" Row="2" DesktopApplicationLinkPath="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\R\R 4.5.1.lnk" />
          <start:DesktopApplicationTile Size="2x2" Column="4" Row="0" DesktopApplicationLinkPath="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RStudio.lnk" />
          <start:DesktopApplicationTile Size="2x2" Column="4" Row="2" DesktopApplicationLinkPath="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TabWin415.lnk" />
        </start:Group>
        <start:Group Name="-">
          <start:DesktopApplicationTile Size="2x2" Column="0" Row="0" DesktopApplicationLinkPath="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TerraView-5.7.1 (Win64)\TerraView 5.7.1 (Win64).lnk" />
          <start:DesktopApplicationTile Size="2x2" Column="0" Row="2" DesktopApplicationLinkPath="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VLC media player.lnk" />
        </start:Group>
      </defaultlayout:StartLayout>
    </StartLayoutCollection>
  </DefaultLayoutOverride>
</LayoutModificationTemplate>]]></StartLayout>
      <Taskbar ShowTaskbar="true" />
      <v2:FileExplorerNamespaceRestrictions>
        <v2:AllowedNamespace Name="Downloads" />
      </v2:FileExplorerNamespaceRestrictions>
    </Profile>
  </Profiles>
  <Configs>
    <Config>
      <Account>ESUFRN</Account>
      <DefaultProfile Id="{1E72DA1B-1856-4D48-9A9A-C9483037D004}" />
    </Config>
  </Configs>
</AssignedAccessConfiguration>

The Question:

What is wrong with my second file (XMLKiosk.xml) that is preventing it from being applied? Is there incorrect syntax or a limitation in Windows 10 IoT that I am not considering?

Any help in identifying the issue would be greatly appreciated. Thank you!

I tried to create a multi-app kiosk profile for Windows 10 IoT Enterprise 21H2. I started with a base XML configuration that successfully lists the allowed applications, and this works perfectly.

Then, I modified this XML to add a folder access restriction. Specifically, I added <v2:FileExplorerNamespaceRestrictions> to limit file access to the "Downloads" folder only. I also added C:\Windows\explorer.exe to the list of allowed applications, as this is a requirement for the restriction to work.

I was expecting the provisioning package (.ppkg) to install successfully. After installation, I expected the kiosk user to be logged into an environment where only the specified applications could run, and where any attempt to use File Explorer or an open/save dialog would be restricted to the Downloads folder.

What actually resulted is that the provisioning package fails to install. Windows provides a generic error and the profile is not applied at all. The kiosk mode is not configured, and the system remains unchanged.

Desenvolvimento para Windows | Serviços de Informações da Internet
0 comentários

Sua resposta

As respostas podem ser marcadas como ‘Aceitas’ pelo autor da pergunta e ‘Recomendadas’ pelos moderadores, o que ajuda os usuários a saber a resposta que resolveu o problema do autor.