From 6f6c565f903025ff82f7bb9b49c27ca67c2c3d74 Mon Sep 17 00:00:00 2001 From: Teresa-Motiv Date: Wed, 22 Apr 2020 18:04:20 -0700 Subject: [PATCH] Revisions --- devices/hololens/hololens-kiosk.md | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) diff --git a/devices/hololens/hololens-kiosk.md b/devices/hololens/hololens-kiosk.md index ab4ab88f47..7602c26e6e 100644 --- a/devices/hololens/hololens-kiosk.md +++ b/devices/hololens/hololens-kiosk.md @@ -114,9 +114,13 @@ If you use an MDM system or a provisioning package to configure kiosk mode, you > 3 Even if you do not enable Cortana as a kiosk app, built-in voice commands are enabled. However, commands that are related to disabled features have no effect. > 4 To enable Miracast as a kiosk app, enable the Camera app and the Device Picker app. -### Plan access control +### Plan user and device groups + +In an MDM environment, you use user groups and device groups to manage device configurations and user access. For a full discussion of the roles of user groups and device groups in Intune, see [Assign user and device profiles in Microsoft Intune: User groups vs. device groups](https://docs.microsoft.com/intune/configuration/device-profile-assign). + +In short, you configure assignments to deploy the kiosk configuration to devices and you configure user groups (sometimes called user logon types) to determine which users can use the kiosk devices. If a user signs in by using an account that is not included in the appropriate group, that user does not have a Kiosk experience. + -It's important that the group or groups you choose includes users you want to use the Kiosk, if a user signs in with an account not included in this list they will not have a Kiosk experience. One device can easily be set up to have one kiosk set up for it. If you opt for multi-app kiosk then not you don't need to require all users to use the Kiosk. @@ -129,9 +133,7 @@ Click assignments and add the group(s) that you want the Kiosk mode policy deplo > [!IMPORTANT] > If two more or more different kiosk polices target a device they will conflict and the device will receive neither. Other policies such as device restrictions do not conflict with Kiosk mode or additional device restrictions. -For more information on group type, and group assignments please visit [here](https://docs.microsoft.com/intune/configuration/device-profile-assign). -There is an important distinction between the **User logon type** and the **Assignments**. Assignments is how the deployment of the Kiosk to a device is determined. Once a Kiosk policy is on the device, it uses the User logon type to determine which users should be using the Kiosk. **Examples:**