Intune Kiosk Følg
Requirements
Before starting to deploy Intune kiosk, there are a few things to check before continuing:
- onVisit tenant running 5.9.3.44 or higher
- onVisit Update is installed
- onVisit WPF deployed through onVisit update
There are multiple approaches to Intune configurations. onVisit has best compatibility with Shell Launcher, which this guide will walk you through.
Note that onVisit does not support Single App, and we do not recommend Multi App.
Shell Launcher is recommended.
Create Kiosk Profile
- Navigate to intune (https://intune.microsoft.com/)
- Go to Devices -> Windows -> Configuration
- Create new profile -> Windows 10 and later -> Templates -> Custom
Configuration settings (Step 2)
Add OMA-URI settingsName: ShellLauncher OMA-URI: ./Vendor/MSFT/AssignedAccess/ShellLauncher Data type: String (XML file)Upload the XML file in the next step, remember to fill inn customer number and remove the placeholder '<CUSTOMER NUMBER>'
<?xml version="1.0" encoding="utf-8"?> <ShellLauncherConfiguration xmlns="http://schemas.microsoft.com/ShellLauncher/2018/Configuration" xmlns:V2="http://schemas.microsoft.com/ShellLauncher/2019/Configuration"> <Profiles> <Profile Id="{00000000-0000-0000-0000-000000000001}"> <Shell Shell="C:\onvisit\<CUSTOMER NUMBER>.onvisit.Update\InstalledClients\<CUSTOMER NUMBER>.onVisit.UIClient.Wpf\Adaptive.onVisit.UIClient.Wpf.exe" V2:AppType="Desktop" V2:AllAppsFullScreen="true"> <ReturnCodeActions> <ReturnCodeAction ReturnCode="99" Action="DoNothing"/> </ReturnCodeActions> <DefaultAction Action="RestartShell"/> </Shell> </Profile> </Profiles> <Configs> <Config> <AutoLogonAccount/> <Profile Id="{00000000-0000-0000-0000-000000000001}"/> </Config> </Configs> </ShellLauncherConfiguration>- Assignments (Step 3)
Assign groups/users/devices which is going to run this kiosk profile
Create profile.
Create Settings Profile
- Create > New policy > Windows 10 > Profile type: Settings
Configuration settings (Step 2):
- Reboot > Daily Recurrent - Lock Down > Allow Edge Swipe > Block - Bluetooth > Allow Advertising > Block - Delivery Optimization > DO Download Mode > HTTP only, no peering - Administrative Templates Power Management Video and Display Settings > Turn off the display (on battery) > Disabled - Administrative Templates Power Management Video and Display Settings > Turn off the display (plugged in) > Disabled - Power > Unattended Sleep Timeout On Battery > 0 - Power > Unattended Sleep Timeout Plugged In > 0- Assignments (Step 3)
Assign groups/users/devices which is going to run this settings profile
Create profile
Important policies missing from intune:
Turn off adaptive brightness (Depending on machine)
Alternative:powercfg -setdcvalueindex SCHEME_CURRENT 7516b95f-f776-4464-8c53-06167f40cc99 FBD9AA66-9553-4097-BA44-ED6E9D65EAB8 0 powercfg -SetActive SCHEME_CURRENT powercfg -setacvalueindex SCHEME_CURRENT 7516b95f-f776-4464-8c53-06167f40cc99 FBD9AA66-9553-4097-BA44-ED6E9D65EAB8 0 powercfg -SetActive SCHEME_CURRENTChange to 100% brightness (Depending on machine)
Alternative in powershell:# Change the screen brightness to 100% (Get-WmiObject -Namespace root/WMI -Class WmiMonitorBrightnessMethods).WmiSetBrightness(1,100) # Batterysaver brightness to 100 powercfg /setdcvalueindex SCHEME_CURRENT SUB_ENERGYSAVER ESBRIGHTNESS 100
onVisit settings
This is settings that needs to be changed on onVisit site, these settings are only visible to Adaptive staff:
- Log of user from Windows = true