Kiosk Mode via Intune
From Notes_Wiki
Home > Microsoft Intune > Kiosk Mode via Intune
Kiosk Mode via Intune
Overview
Kiosk Mode in Intune allows administrators to restrict a Windows device to specific apps or browsers. It is commonly used for shared devices, labs, retail environments, or public terminals.
Prerequisites
- Intune Administrator or Global Administrator role.
- Devices must be Windows 10/11 and enrolled in Intune.
- Required applications should be installed or deployed beforehand.
Steps
1. Sign in
- Open Microsoft Intune Admin Center.
- Log in with administrator credentials.
- Go to: Devices > Configuration profiles > Create profile.
3. Select Platform and Profile Type
- Platform: Windows 10 and later
- Profile type: Templates > Kiosk
4. Configure Kiosk Settings
- Choose Kiosk Mode type:
- Single-app kiosk → Locks the device to a single application (e.g., Edge browser).
- Multi-app kiosk → Allows a controlled set of apps in a restricted shell.
- Add applications to be allowed.
- Configure start layout if required.
5. Assign the Profile
- Assign to Azure AD groups (e.g., Kiosk Devices, Lab PCs).
6. Review and Create
- Verify settings.
- Click Create.
7. Monitor Deployment
- Navigate: Devices > Configuration profiles > Select Profile > Device/User status.
- Confirm successful deployment.
Notes
- Ideal for labs, kiosks, and public-facing devices.
- Ensure apps are available before locking the device.
- Can be combined with Shared PC mode for multi-user scenarios.