Introduction
This is my notes while playing around with kiosk. I was testing the brand-new Kiosk setting for the new Microsoft Edge and the only result I got out of that was a non-working device. Eventlog saying MDM Session: Failed to get AAD Token for sync session User Token: (Unknown Win32 Error code: 0xcaa10001) Device Token: (Incorrect function.). I must mention that it was right after its release and later tests has worked just fine.
So why make a blog post for kiosk using multi app mode? Well because this method just works!
A huge thanks to Microsoft MVP Peter Klapwijk for making a blogpost for multi kiosk environment which helped me in the right direction.
Requirements
- Microsoft Endpoint Manager
- Windows 10, version 1809 or later, but recommend 1903 or higher as there are so many random TPM errors on 1809.
- Azure AD join only
- Physical device with TPM 2.0 (virtual machine is not supported);
- For more in-depth information see official docs here and also Michael Niehaus's deep insight into Autopilot self-deploying mode here
Components in Intune to get multi app kiosk to work
- Azure AD group
- Autopilot profile
- Microsoft Edge application
- Kiosk policies
- Powershell script
- Power Settings
Creating Azure AD Group
Login to https://endpoint.microsoft.com/
Go to Groups
Press New group
Create Group name
Choose membership type
Press Add dynamic query
In the right side – Click Edit
Insert a rule that gather all autopilot enabled devices with the Grouptag ID “Tabulex-SFO-FRE” (You can call it whatever you like. Just make sure to keep changing GroupTag throughout the guide)
Click OK
Click Save
Creating Autopilot profile
Login to https://endpoint.microsoft.com/
Go to Devices
Enroll devices
Press Deployment Profiles
Create profile -> Windows PC
Give it a name
Press next
Set Deployment mode
Apply device name template
Enter a name (we will use KIOSK-M-A-1234 which will be M for Multi, A for App and 4 random numbers)
Press next
Add groups
Search for the group created in the first section
Select it
Press select
Review your settings and press Create
Creating Microsoft Edge application
Login to https://endpoint.microsoft.com/
Go to Apps
Select Windows
Select Add
Select Microsoft Edge
Press select in the bottom
You can reuse your Microsoft Edge if that already exist, but I like to keep it separate. (It is no different from the default Edge installation)
Press Next
Press Next
Press Add group
Search for the group created in the first section
Select it
Press select
Press Next
Review your settings and press create
Creating Kiosk profile
Login to https://endpoint.microsoft.com/
Go to Devices
Go to Windows
Go to Configuration profiles
Create profile
Choose Platform
Choose Profile type
Search for kiosk
Press template name – Kiosk
Press create
Give it a name
Press next
Select a kiosk mode
Select Add Win32 app
Application name: Microsoft Edge
Executable file: %ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\Kiosk.lnk
AUMID: MSEdge
Press OK
(You may wonder why we point to a lnk file. It will make sense later in this guide)
Press yes in Autolaunch
Press next
Add groups
Search for the group created in the first section
Select it
Press select
Press Next
Press Next
Review and press create
Applying powershell script
Download this script
Change URL accordingly to what you need it to show (tip: you can see all Edge kiosk possibilities here and add as you need)
Save the script
Login to https://endpoint.microsoft.com/
Go to Devices
Go to Windows
Go to PowerShell script
Press Add
Add name
Press Next
Add script
Press next
Press Add groups
Search for the group created in the first section
Select it
Press select
Review and press add
Applying Microsoft Edge policies
Login to https://endpoint.microsoft.com/
Go to Devices
Go to Windows
Go to Configuration profiles
Create profile
Choose Platform
Choose Profile type
Press create
Add Name
Press Next
Add settings
Search for “Power”
Tick the 2 results
(If your device goes to hibernate or other sleep states, you can add from the category “power” as well to prevent that)
Enable the settings and set it to 0
Press Next
Press Add groups
Search for the group created in the first section
Select it
Press select
Press Next
Press next
Review settings and press create
Summary
That’s it folks. How to create a Kiosk device that works very nicely with the ongoing Microsoft Edge versions. You can use the Kiosk mode for many purposes, and this just showed how to come around with a single app in a multi app kiosk mode. Here is a video on the end result.
Happy kiosk deployment!
