Introduction

This is my notes while playing around with kiosk. I was testing the brand-new Kiosk setting for the new Microsoft Edge and the only result I got out of that was a non-working device. Eventlog saying MDM Session: Failed to get AAD Token for sync session User Token: (Unknown Win32 Error code: 0xcaa10001) Device Token: (Incorrect function.). I must mention that it was right after its release and later tests has worked just fine.

So why make a blog post for kiosk using multi app mode? Well because this method just works!

A huge thanks to Microsoft MVP Peter Klapwijk for making a blogpost for multi kiosk environment which helped me in the right direction.

  

Requirements

• Microsoft Endpoint Manager
• Windows 10, version 1809 or later, but recommend 1903 or higher as there are so many random TPM errors on 1809.
• Azure AD join only
• Physical device with TPM 2.0 (virtual machine is not supported);
• For more in-depth information see official docs here and also Michael Niehaus’s deep insight into Autopilot self-deploying mode here

 

Components in Intune to get multi app kiosk to work

• Azure AD group
• Autopilot profile
• Microsoft Edge application
• Kiosk policies
• Powershell script
• Power Settings

 

Creating Azure AD Group

Login to https://endpoint.microsoft.com/

Go to Groups

 

Press New group

 

Create Group name

Choose membership type

Press Add dynamic query

 

In the right side – Click Edit

Insert a rule that gather all autopilot enabled devices with the Grouptag ID “Tabulex-SFO-FRE” (You can call it whatever you like. Just make sure to keep changing GroupTag throughout the guide)

Click OK

 

Click Save

 

Creating Autopilot profile

Login to https://endpoint.microsoft.com/

Go to Devices

 

Enroll devices

 

Press Deployment Profiles

 

Create profile -> Windows PC

 

Give it a name

Press next

 

Set Deployment mode

Apply device name template

Enter a name (we will use KIOSK-M-A-1234 which will be M for Multi, A for App and 4 random numbers)

Press next

 

Add groups

 

Search for the group created in the first section

Select it

Press select

 

Review your settings and press Create

 

Creating Microsoft Edge application

Login to https://endpoint.microsoft.com/

Go to Apps

 

Select Windows

 

Select Add

 

Select Microsoft Edge

Press select in the bottom

 

You can reuse your Microsoft Edge if that already exist, but I like to keep it separate. (It is no different from the default Edge installation)

Press Next

Press Next

 

Press Add group

 

Search for the group created in the first section

Select it

Press select

 

Press Next

 

Review your settings and press create

 

Creating Kiosk profile

Login to https://endpoint.microsoft.com/

Go to Devices

 

Go to Windows

 

Go to Configuration profiles

 

Create profile

 

Choose Platform

Choose Profile type

Search for kiosk

Press template name – Kiosk

Press create

 

Give it a name

Press next

 

Select a kiosk mode

Select Add Win32 app

 

Application name: Microsoft Edge

Executable file: %ALLUSERSPROFILE%MicrosoftWindowsStart MenuProgramsKiosk.lnk

AUMID: MSEdge

Press OK

(You may wonder why we point to a lnk file. It will make sense later in this guide)

 

Press yes in Autolaunch

Press next

 

Add groups

 

Search for the group created in the first section

Select it

Press select

 

Press Next

 

Press Next

 

Review and press create

 

Applying powershell script

Download this script

Change URL accordingly to what you need it to show (tip: you can see all Edge kiosk possibilities here and add as you need)

Save the script

 

Login to https://endpoint.microsoft.com/

Go to Devices

 

Go to Windows

 

Go to PowerShell script

 

Press Add

 

Add name

Press Next

 

Add script

Press next

 

Press Add groups

 

Search for the group created in the first section

Select it

Press select

 

Review and press add

 

Applying Microsoft Edge policies

Login to https://endpoint.microsoft.com/

Go to Devices

 

Go to Windows

 

Go to Configuration profiles

 

Create profile

 

Choose Platform

Choose Profile type

Press create

 

Add Name

Press Next

 

Add settings

 

Search for “Power”

Tick the 2 results

(If your device goes to hibernate or other sleep states, you can add from the category “power” as well to prevent that)

 

Enable the settings and set it to 0

Press Next

 

Press Add groups

 

Search for the group created in the first section

Select it

Press select

 

Press Next

 

Press next

 

Review settings and press create

 

Summary

That’s it folks. How to create a Kiosk device that works very nicely with the ongoing Microsoft Edge versions. You can use the Kiosk mode for many purposes, and this just showed how to come around with a single app in a multi app kiosk mode. Here is a video on the end result.

 

 

Happy kiosk deployment!