Kiosk

With POS devices and single-purpose devices finding an exponential level of usage in organizations, ensuring devices are locked to specific app and/or settings becomes a cumbersome task for system administrators. Kiosk for Windows devices, easily and efficiently solves this as it lets you silently install apps on devices and lock the device to a single app or a set of specified apps. This ensures the user cannot access any other apps or modify the device settings.

Note: Multi-app Kiosk is applicable only for Windows 10 laptops and desktops.

Pre-requisites

• Device based :
  • Kiosk policy is not supported for Windows Home edition devices.
• Account based :
  • The user must be a standard user. i.e, Kiosk is not supported for administrator accounts.
  • Windows Kiosk policy is user specific. Devices are provisioned under Kiosk only for particular users to whom the they are assigned to, provided the same user account is available on the device. Applicable for AD users too.
• Application based :
  • Only Universal Windows Provisioning (UWP) apps, also known as Metro-style apps or Modern apps can be provisioned under Kiosk. To know more about UWP apps, click here.
  • The apps to be provisioned under Kiosk must be present in the device. In case of managed apps, these can be distributed via MDM. For silent installation of apps, they must be present in the App Repository. Click here to learn more about adding apps to App Repository.

Profile Description

SPECIFICATION	DESCRIPTION
Kiosk type	Select whether the device must be provisioned with a single app or multiple apps.
Allowed app(s)	Specify the app(s) to be provisioned under Kiosk. All the apps present in the App Repository and managed devices can be provisioned as Kiosk app(s). Once the Kiosk app(s) has been chosen, the App ID and Product ID are automatically pre-filled (not shown to the users). If not, you need manually provide the App ID as explained here and Store ID as specified here. MDM will automatically generate Product ID from the Store ID.
Automatically install the apps if not present on the device (Can be configured only if Kiosk type is Multi-app)	If enabled, Kiosk-provisioned apps will be automatically installed if silent installation is supported or if silent installation isn't supported, the apps get distributed to the App Catalog, from where the user needs to install it. In case you chose to disable this option after associating the profile, devices to which the policy was previously distributed will remain unaffected. If you associate

In case of Windows mobile devices, when the Kiosk policy is disassociated, the devices will be automatically factory reset. This is mandatory for the devices to be re-used again. In case of devices enrolled using ICD enrollment, the devices get re-enrolled after factory reset and you need to assign users to complete enrollment.

How to obtain App ID?

• To obtain the App ID, download this PowerShell script and open Command Prompt as an Administrator, in the folder where you have downloaded the PowerShell script.
• Copy the following command and paste it in Command Prompt. Ensure you replace app-name, with the name of the app to be provisioned under Kiosk

powershell -ExecutionPolicy ByPass -File aumid.ps1 <app-name>

• Once executed, the app name and the app ID is shown. The app ID is to be copied and used in MDM.

How to obtain Store ID?

• Go to Windows Store and search for the app to be provisioned under Kiosk.
• Now, copy the last 12 characters present in the URL. This constitutes the Store ID.