Configure a Windows 10 Kiosk Device Using Microsoft Intune

November 4, 2019   //   Microsoft System Center Security

Running Windows 10 in kiosk mode is a great feature if you need to lock down devices to only allow one or a few applications to run while also preventing end users from accessing anything else on the device. While previous versions of Windows required you to setup a kiosk device with group policy or registry settings, Microsoft Intune now contains native functionality for setting up kiosk devices.

Microsoft Intune provides a very simple and effective way to deploy kiosk devices within your organization. The powerful modern management capabilities also make it easy to scale the solution across many devices.

In this blog, we will go over how to configure your Windows 10 device to run in kiosk mode and the appropriate setting for your kiosk device.

How to Set-up a Kiosk Device with Microsoft Intune

1. Login to the Intune Portal and Create a New Profile

Navigate to devicemanagement.microsoft.com and with appropriate credentials login to the Intune portal. Once you are logged in, go into the device configuration and create a new profile for the kiosk device.

Intune Kiosk

2. Enter the Profile Details

Give the profile a name, select the platform (Windows 10 or later in this case) and choose Kiosk for the profile type.

3. Configure the Profile

Click settings to configure the profile. This is where you will select the kiosk device to be either a single app, full screen kiosk or a multi-app kiosk. For this tutorial, we will select single app, full-screen kiosk as the kiosk mode.

Microsoft Kiosk

4. Fill in the Appropriate Settings for your Kiosk Device

After you select the kiosk mode, you will need to fill in the user logon type, the application type, and specify the maintenance window for app restarts.

  • User Logon Type – You can select Auto logon for the device to login automatically or use a local user account. Auto logon requires Windows 10 1803.
  • Application Type – You can add the Microsoft Edge Browser, a Kiosk browser or a Windows Store app. Each option has some additional settings to configure depending on what you select.
  • Specify Maintenance Window for App Restarts – Some apps require restarts to complete app updates. You can choose to provide a maintenance window start time as well as a recurrence or you can choose to not configure this.

Microsoft Intune

5. Create the Profile and Assign it to a Device Group for Deployment

Once the profile has been created, select assignments and choose which device group you would like to include for deployment. When the device checks into Intune next, it will begin to apply this profile and the configured settings.

Microsoft Intune provides you a simple way to manage devices to keep company data safe. If you would like to learn more about how Microsoft Intune can help protect your organization, contact us to discuss your unique environment and business requirements.

Managed Defense Trial