diff --git a/windows/configuration/kiosk/_kiosk-single-app.md b/windows/configuration/kiosk/_kiosk-single-app.md index 91de671a1c..0a1157a215 100644 --- a/windows/configuration/kiosk/_kiosk-single-app.md +++ b/windows/configuration/kiosk/_kiosk-single-app.md @@ -77,44 +77,6 @@ When your kiosk is a local device that isn't managed by Active Directory or Micr ![Screenshot of automatic sign-in setting.](images/auto-signin.png) -### Windows 10 version 1809+ / Windows 11 - -When you set up a kiosk (also known as *assigned access*) in **Settings** for Windows client, you create the kiosk user account at the same time. To set up assigned access in PC settings: - -Open the **Settings** app > **Accounts**. Select **Other users** or **Family and other users**. - -1. Select **Set up a kiosk > Assigned access**, and then select **Get started**. - -1. Enter a name for the new account. - - >[!NOTE] - >If there are any local standard user accounts on the device already, the **Create an account** page will offer the option to **Choose an existing account**. - -1. Choose the app that will run when the kiosk account signs in. Only apps that can run above the lock screen will be available in the list of apps to choose from. For more information, see [Guidelines for choosing an app for assigned access](guidelines-for-assigned-access-app.md). If you select **Microsoft Edge** as the kiosk app, you configure the following options: - - - Whether Microsoft Edge should display your website full-screen (digital sign) or with some browser controls available (public browser) - - Which URL should be displayed when the kiosk accounts signs in - - When Microsoft Edge should restart after a period of inactivity (if you select to run as a public browser) - -1. Select **Close**. - -To remove assigned access, select the account tile on the **Set up a kiosk** page, and then select **Remove kiosk**. - -### Windows 10 version 1803 and earlier - -When you set up a kiosk (also known as *assigned access*) in **Settings** for Windows 10 version 1803 and earlier, you must select an existing local standard user account. [Learn how to create a local standard user account.](https://support.microsoft.com/help/4026923/windows-create-a-local-user-or-administrator-account-in-windows-10) - -![The Set up assigned access page in Settings.](images/kiosk-settings.png) - -To set up assigned access in PC settings: - -1. Go to **Start** > **Settings** > **Accounts** > **Other people**. -1. Select **Set up assigned access**. -1. Choose an account. -1. Choose an app. Only apps that can run above the lock screen will be available in the list of apps to choose from. For more information, see [Guidelines for choosing an app for assigned access](guidelines-for-assigned-access-app.md). -1. Close **Settings** - your choices are saved automatically, and will be applied the next time that user account signs in. -To remove assigned access, choose **Turn off assigned access and sign out of the selected account**. - ## Set up a kiosk using Windows PowerShell App type: diff --git a/windows/configuration/kiosk/assigned-access-quickstart-kiosk.md b/windows/configuration/kiosk/assigned-access-quickstart-kiosk.md index 4ae2bf79d1..7c56ac905f 100644 --- a/windows/configuration/kiosk/assigned-access-quickstart-kiosk.md +++ b/windows/configuration/kiosk/assigned-access-quickstart-kiosk.md @@ -7,7 +7,7 @@ appliesto: - ✅ Windows 11 --- -# Quickstart: Configure a kiosk experience with Assigned Access +# Quickstart: Configure a kiosk with Assigned Access ## Prerequisites @@ -19,16 +19,35 @@ appliesto: >- Windows Configuration Designer, if you want to configure the settings using a provisioning package >- Access to the [psexec tool](/sysinternals/downloads/psexec), if you want to test the configuration using Windows PowerShell -## Configure a restricted user experience - -When using Settings: - -AppId: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe -Arguments: --no-first-run --kiosk https://maps.cltairport.com/ --kiosk-idle-timeout-minutes=5 --edge-kiosk-type=public-browsing - +## Configure a kiosk [!INCLUDE [tab-intro](../../../includes/configure/tab-intro.md)] +#### [:::image type="icon" source="../images/icons/settings.svg"::: **Settings**](#tab/settings) + +Here are the steps to configure a kiosk using the Settings app: + +1. Open the Settings app to view and configure a device as a kiosk. Go to **Settings > Accounts > Other Users**, or use the following shortcut: + + > [!div class="nextstepaction"] + > + > [Other Users](ms-settings:otherusers) + +1. Under **Set up a kiosk**, select **Get Started** +1. In the **Create an account** dialog, enter the account name and select **Next** + >[!NOTE] + >If there are any local standard user accounts already, the **Create an account** dialog offers the option to **Choose an existing account** + +1. Choose the application to run when the kiosk account signs in. Only apps that can run above the lock screen will be available in the list of apps to choose from. For more information, see [Guidelines for choosing an app for assigned access](guidelines-for-assigned-access-app.md). If you select **Microsoft Edge** as the kiosk app, you configure the following options: + + - Whether Microsoft Edge should display your website full-screen (digital sign) or with some browser controls available (public browser) + - Which URL should be open when the kiosk accounts signs in + - When Microsoft Edge should restart after a period of inactivity (if you select to run as a public browser) + + :::image type="content" source="images/settings-choose-app.png" alt-text="Screenshot of the dialog box asking to select an app."::: + +1. Select **Close** + #### [:::image type="icon" source="../images/icons/intune.svg"::: **Intune/CSP**](#tab/intune) > [!TIP] @@ -70,7 +89,9 @@ Alternatively, you can configure devices using a [custom policy][MEM-1] with the ## User experience -After the settings are applied, reboot the device. A local user account named `Airport Kiosk` is automatically signed in, opening Microsoft Edge with an airport map. +If you used the Settings app to configure the kiosk, sign out and sign in with the account you chose to use as a kiosk. The kiosk application is automatically launched. + +If you used the other options to configure the kiosk, reboot the device. A local user account named `Airport Kiosk` is automatically signed in, opening Microsoft Edge with an airport map. ## Next steps diff --git a/windows/configuration/kiosk/images/settings-choose-app.png b/windows/configuration/kiosk/images/settings-choose-app.png new file mode 100644 index 0000000000..62d64ce232 Binary files /dev/null and b/windows/configuration/kiosk/images/settings-choose-app.png differ diff --git a/windows/configuration/kiosk/kiosk-mdm-bridge.md b/windows/configuration/kiosk/kiosk-mdm-bridge.md deleted file mode 100644 index 7c67e96e8e..0000000000 --- a/windows/configuration/kiosk/kiosk-mdm-bridge.md +++ /dev/null @@ -1,143 +0,0 @@ ---- -title: Use MDM Bridge WMI Provider to create a Windows kiosk -description: Environments that use Windows Management Instrumentation (WMI) can use the MDM Bridge WMI Provider to configure the MDM_AssignedAccess class. -ms.topic: article -ms.date: 1/26/2024 -zone_pivot_groups: windows-versions-11-10 -appliesto: ---- - -# Use MDM Bridge WMI Provider to create a Windows client kiosk - -Environments that use [Windows Management Instrumentation (WMI)](/windows/win32/wmisdk/wmi-start-page) can use the [MDM Bridge WMI Provider](/windows/win32/dmwmibridgeprov/mdm-bridge-wmi-provider-portal) to configure the MDM_AssignedAccess class. For more information about using a PowerShell script to configure AssignedAccess, see [PowerShell Scripting with WMI Bridge Provider](/windows/client-management/mdm/using-powershell-scripting-with-the-wmi-bridge-provider). - -Here's an example to set AssignedAccess configuration: - -1. [Download PsTools][PSTools] -1. Open an elevated command prompt and run: `psexec.exe -i -s powershell.exe` -1. In the PowerShell session launched by `psexec.exe`, execute the following script: - -::: zone pivot="windows-10" - -```PowerShell -$nameSpaceName="root\cimv2\mdm\dmmap" -$className="MDM_AssignedAccess" -$obj = Get-CimInstance -Namespace $namespaceName -ClassName $className -Add-Type -AssemblyName System.Web - -$obj.Configuration = [System.Web.HttpUtility]::HtmlEncode(@" - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - ]]> - - - - - - - MultiAppKioskUser - - - - -"@) - -Set-CimInstance -CimInstance $obj -``` - -::: zone-end - -::: zone pivot="windows-11" - - ```PowerShell -$nameSpaceName="root\cimv2\mdm\dmmap" -$className="MDM_AssignedAccess" -$obj = Get-CimInstance -Namespace $namespaceName -ClassName $className -Add-Type -AssemblyName System.Web - -$obj.Configuration = [System.Web.HttpUtility]::HtmlEncode(@" - - - - - - - - - - - - - - - - - - - - - - - MultiAppKioskUser - - - - -"@) - -Set-CimInstance -CimInstance $obj -``` - -::: zone-end - -For more information, see [Using PowerShell scripting with the WMI Bridge Provider][WIN-1]. - - - -[WIN-1]: /windows/client-management/mdm/using-powershell-scripting-with-the-wmi-bridge-provider -[PsTools]: https://download.sysinternals.com/files/PSTools.zip diff --git a/windows/configuration/kiosk/toc.yml b/windows/configuration/kiosk/toc.yml index d582fb0398..12e387a450 100644 --- a/windows/configuration/kiosk/toc.yml +++ b/windows/configuration/kiosk/toc.yml @@ -23,8 +23,6 @@ items: href: create-shell-launcher-configuration.md - name: Find the AUMID of an installed app href: find-aumid.md - - name: Use MDM Bridge WMI Provider to create a Windows client kiosk - href: kiosk-mdm-bridge.md - name: Use Shell Launcher to create a Windows client kiosk href: kiosk-shelllauncher.md - name: Troubleshoot