Shared Multi-User Device Configuration via Intune

From Notes_Wiki

Home > Microsoft Intune > Shared Multi-User Device Configuration via Intune

Title: Shared Multi-User Device Configuration via Intune Topic: Configured PCs for multiple users (e.g., labs/kiosks) without saving personal data

Steps:

1. Sign in to Microsoft Intune Admin Center

  - URL: https://endpoint.microsoft.com
  - Use Intune Administrator or Global Administrator account.

2. Navigate to Device Configuration

  - Go to Devices > Configuration profiles > Create profile.

3. Select Platform and Profile Type

  - Platform: Windows 10 and later
  - Profile type: Templates > Shared multi-user device

4. Configure Shared Multi-User Settings

  - Enable "Shared PC mode".
  - Options:
    - Guest account: Enable/Disable.
    - Account management: Remove accounts when they fall out of use.
    - Set inactive threshold (e.g., 7 days).
    - Delete cached accounts immediately after sign-out.
    - Restrict local storage usage.

5. Configure Education/Lab/Kiosk Scenarios (Optional)

  - Enable “Education shared device settings” if for classroom/lab use.
  - Restrict saving personal data locally.
  - Enforce fast sign-in.

6. Assign the Profile

  - Add Azure AD groups:
    - Lab PCs
    - Kiosk devices
    - Department-shared devices

7. Review + Create

  - Review configuration summary.
  - Click "Create" to publish the shared device profile.

8. Monitor Deployment

  - Navigate: Devices > Configuration profiles > Select Profile > Device status/User status.
  - Verify policy applied on shared machines.

Notes: - Ideal for labs, kiosks, training rooms, or shift-based environments. - Ensures user data is not retained between sessions. - Combine with Autopilot self-deployment mode for easier provisioning.


Home > Microsoft Intune > Shared Multi-User Device Configuration via Intune