diff --git a/windows/configuration/provisioning-packages/images/account-management-details.PNG b/windows/configuration/kiosk/images/account-management-details.PNG similarity index 100% rename from windows/configuration/provisioning-packages/images/account-management-details.PNG rename to windows/configuration/kiosk/images/account-management-details.PNG diff --git a/windows/configuration/kiosk/kiosk-methods.md b/windows/configuration/kiosk/kiosk-methods.md index f6da0c5180..2302d863e9 100644 --- a/windows/configuration/kiosk/kiosk-methods.md +++ b/windows/configuration/kiosk/kiosk-methods.md @@ -15,8 +15,6 @@ Some desktop devices in an enterprise serve a special purpose. For example, a PC - **A single-app kiosk**: Runs a single Universal Windows Platform (UWP) app in full screen above the lock screen. People using the kiosk can see only that app. When the kiosk account (a local standard user account) signs in, the kiosk app launches automatically, and you can configure the kiosk account to sign in automatically as well. If the kiosk app is closed, it will automatically restart. - - A single-app kiosk is ideal for public use. Using [Shell Launcher](kiosk-shelllauncher.md), you can configure a kiosk device that runs a Windows desktop application as the user interface. The application that you specify replaces the default shell (explorer.exe) that usually runs when a user logs on. This type of single-app kiosk doesn't run above the lock screen. ![Illustration of a full-screen kiosk experience that runs one app on a Windows client device.](images/kiosk-fullscreen.png) @@ -41,7 +39,7 @@ There are several kiosk configuration methods that you can choose from, dependin ![icon that represents a kiosk.](images/kiosk.png) - If you want your kiosk to run a single app for anyone to see or use, consider a single-app kiosk that runs either a [Universal Windows Platform (UWP) app](#methods-for-a-single-app-kiosk-running-a-uwp-app) or a [Windows desktop application](#classic). For a kiosk that people can sign in to with their accounts or that runs more than one app, choose [a multi-app kiosk](#desktop). + If you want your kiosk to run a single app for anyone to see or use, consider a single-app kiosk that runs either a [Universal Windows Platform (UWP) app](#methods-for-a-single-app-kiosk-running-a-uwp-app) or a Windows desktop application. For a kiosk that people can sign in to with their accounts or that runs more than one app, choose a multi-app kiosk. - **Which edition of Windows client will the kiosk run?** @@ -64,24 +62,20 @@ There are several kiosk configuration methods that you can choose from, dependin You can use this method | For this edition | For this kiosk account type --- | --- | --- -[Assigned access in Settings](kiosk-single-app.md#local) | Pro, Ent, Edu | Local standard user -[Assigned access cmdlets](kiosk-single-app.md#powershell) | Pro, Ent, Edu | Local standard user -[The kiosk wizard in Windows Configuration Designer](kiosk-single-app.md#wizard) | Pro (version 1709), Ent, Edu | Local standard user, Active Directory, Microsoft Entra ID -[Microsoft Intune or other mobile device management (MDM)](kiosk-single-app.md#mdm) | Pro (version 1709), Ent, Edu | Local standard user, Microsoft Entra ID +[Assigned access in Settings](kiosk-single-app.md) | Pro, Ent, Edu | Local standard user +[Assigned access cmdlets](kiosk-single-app.md) | Pro, Ent, Edu | Local standard user +[The kiosk wizard in Windows Configuration Designer](kiosk-single-app.md) | Pro (version 1709), Ent, Edu | Local standard user, Active Directory, Microsoft Entra ID +[Microsoft Intune or other mobile device management (MDM)](kiosk-single-app.md) | Pro (version 1709), Ent, Edu | Local standard user, Microsoft Entra ID [Shell Launcher](kiosk-shelllauncher.md) v2 | Ent, Edu | Local standard user, Active Directory, Microsoft Entra ID - - ## Methods for a single-app kiosk running a Windows desktop application You can use this method | For this edition | For this kiosk account type --- | --- | --- -[The kiosk wizard in Windows Configuration Designer](kiosk-single-app.md#wizard) | Ent, Edu | Local standard user, Active Directory, Microsoft Entra ID -[Microsoft Intune or other mobile device management (MDM)](kiosk-single-app.md#mdm) | Pro (version 1709), Ent, Edu | Local standard user, Microsoft Entra ID +[The kiosk wizard in Windows Configuration Designer](kiosk-single-app.md) | Ent, Edu | Local standard user, Active Directory, Microsoft Entra ID +[Microsoft Intune or other mobile device management (MDM)](kiosk-single-app.md) | Pro (version 1709), Ent, Edu | Local standard user, Microsoft Entra ID [Shell Launcher](kiosk-shelllauncher.md) v1 and v2 | Ent, Edu | Local standard user, Active Directory, Microsoft Entra ID - - ## Methods for a multi-app kiosk You can use this method | For this edition | For this kiosk account type @@ -94,11 +88,11 @@ You can use this method | For this edition | For this kiosk account type Method | App type | Account type | Single-app kiosk | Multi-app kiosk --- | --- | --- | :---: | :---: -[Assigned access in Settings](kiosk-single-app.md#local) | UWP | Local account | ✅ | -[Assigned access cmdlets](kiosk-single-app.md#powershell) | UWP | Local account | ✅ | -[The kiosk wizard in Windows Configuration Designer](kiosk-single-app.md#wizard) | UWP, Windows desktop app | Local standard user, Active Directory, Microsoft Entra ID | ✅ | +[Assigned access in Settings](kiosk-single-app.md) | UWP | Local account | ✅ | +[Assigned access cmdlets](kiosk-single-app.md) | UWP | Local account | ✅ | +[The kiosk wizard in Windows Configuration Designer](kiosk-single-app.md) | UWP, Windows desktop app | Local standard user, Active Directory, Microsoft Entra ID | ✅ | [XML in a provisioning package](lock-down-windows-10-to-specific-apps.md) | UWP, Windows desktop app | Local standard user, Active Directory, Microsoft Entra ID | ✅ | ✅ -Microsoft Intune or other MDM [for full-screen single-app kiosk](kiosk-single-app.md#mdm) or [for multi-app kiosk with desktop](lock-down-windows-10-to-specific-apps.md) | UWP, Windows desktop app | Local standard user, Microsoft Entra ID | ✅ | ✅ +Microsoft Intune or other MDM [for full-screen single-app kiosk](kiosk-single-app.md) or [for multi-app kiosk with desktop](lock-down-windows-10-to-specific-apps.md) | UWP, Windows desktop app | Local standard user, Microsoft Entra ID | ✅ | ✅ [Shell Launcher](kiosk-shelllauncher.md) |Windows desktop app | Local standard user, Active Directory, Microsoft Entra ID | ✅ | [MDM Bridge WMI Provider](kiosk-mdm-bridge.md) | UWP, Windows desktop app | Local standard user, Active Directory, Microsoft Entra ID | | ✅ diff --git a/windows/configuration/kiosk/kiosk-single-app.md b/windows/configuration/kiosk/kiosk-single-app.md index 69d57e6c87..688758b856 100644 --- a/windows/configuration/kiosk/kiosk-single-app.md +++ b/windows/configuration/kiosk/kiosk-single-app.md @@ -21,28 +21,28 @@ A single-app kiosk uses the Assigned Access feature to run a single app above th You have several options for configuring your single-app kiosk. -- [Locally, in Settings](#local): The **Set up a kiosk** (previously named **Set up assigned access**) option in **Settings** is a quick and easy method to set up a single device as a kiosk for a local standard user account. +- Locally, in Settings: The **Set up a kiosk** (previously named **Set up assigned access**) option in **Settings** is a quick and easy method to set up a single device as a kiosk for a local standard user account. This option supports: - Windows 10 Pro, Enterprise, and Education - Windows 11 -- [PowerShell](#powershell): You can use Windows PowerShell cmdlets to set up a single-app kiosk. First, you need to [create the user account](https://support.microsoft.com/help/4026923/windows-create-a-local-user-or-administrator-account-in-windows-10) on the device and install the kiosk app for that account. +- PowerShell: You can use Windows PowerShell cmdlets to set up a single-app kiosk. First, you need to [create the user account](https://support.microsoft.com/help/4026923/windows-create-a-local-user-or-administrator-account-in-windows-10) on the device and install the kiosk app for that account. This option supports: - Windows 10 Pro, Enterprise, and Education - Windows 11 -- [The kiosk wizard in Windows Configuration Designer](#wizard): Windows Configuration Designer is a tool that produces a *provisioning package*. A provisioning package includes configuration settings that can be applied to one or more devices during the first-run experience (OOBE), or after OOBE is done (runtime). Using the kiosk wizard, you can also create the kiosk user account, install the kiosk app, and configure more useful settings. +- The kiosk wizard in Windows Configuration Designer: Windows Configuration Designer is a tool that produces a *provisioning package*. A provisioning package includes configuration settings that can be applied to one or more devices during the first-run experience (OOBE), or after OOBE is done (runtime). Using the kiosk wizard, you can also create the kiosk user account, install the kiosk app, and configure more useful settings. This option supports: - Windows 10 Pro version 1709+, Enterprise, and Education - Windows 11 -- [Microsoft Intune or other mobile device management (MDM) provider](#mdm): For devices managed by your organization, you can use MDM to set up a kiosk configuration. +- Microsoft Intune or other mobile device management (MDM) provider: For devices managed by your organization, you can use MDM to set up a kiosk configuration. This option supports: @@ -55,20 +55,20 @@ You have several options for configuring your single-app kiosk. > > Be sure to check the [configuration recommendations](kiosk-prepare.md) before you set up your kiosk. - - ## Set up a kiosk in local Settings ->App type: +App type: -> - UWP -> ->OS: -> - Windows 10 Pro, Ent, Edu -> - Windows 11 -> ->Account type: -> - Local standard user +- UWP + +OS: + +- Windows 10 Pro, Ent, Edu +- Windows 11 + +Account type: + +- Local standard user You can use **Settings** to quickly configure one or a few devices as a kiosk. @@ -109,7 +109,7 @@ When you set up a kiosk (also known as *assigned access*) in **Settings** for Wi ![The Set up assigned access page in Settings.](images/kiosk-settings.png) -**To set up assigned access in PC settings** +To set up assigned access in PC settings: 1. Go to **Start** > **Settings** > **Accounts** > **Other people**. 1. Select **Set up assigned access**. @@ -166,8 +166,6 @@ To remove assigned access, using PowerShell, run the following cmdlet: Clear-AssignedAccess ``` - - ## Set up a kiosk using the kiosk wizard in Windows Configuration Designer App type: @@ -293,22 +291,21 @@ When you use the **Provision kiosk devices** wizard in Windows Configuration Des [Learn how to apply a provisioning package.](../provisioning-packages/provisioning-apply-package.md) - - ## Set up a kiosk or digital sign using Microsoft Intune or other MDM service ->App type: +App type: -> - UWP -> ->OS: +- UWP -> - Windows 10 Pro version 1709+, Ent, Edu -> - Windows 11 -> ->Account type: -> - Local standard user -> - Microsoft Entra ID +OS: + +- Windows 10 Pro version 1709+, Ent, Edu +- Windows 11 + +Account type: + +- Local standard user +- Microsoft Entra ID Microsoft Intune and other MDM services enable kiosk configuration through the [AssignedAccess configuration service provider (CSP)](/windows/client-management/mdm/assignedaccess-csp). Assigned Access has a `KioskModeApp` setting. In the `KioskModeApp` setting, you enter the user account name and the [AUMID](/windows-hardware/customize/enterprise/find-the-application-user-model-id-of-an-installed-app) for the app to run in kiosk mode. @@ -317,8 +314,6 @@ Microsoft Intune and other MDM services enable kiosk configuration through the [ To configure a kiosk in Microsoft Intune, see [Windows client and Windows Holographic for Business device settings to run as a dedicated kiosk using Intune](/intune/kiosk-settings). For other MDM services, see the documentation for your provider. - - ## Sign out of assigned access To exit the assigned access (kiosk) app, press **Ctrl + Alt + Del**, and then sign in using another account. When you press **Ctrl + Alt + Del** to sign out of assigned access, the kiosk app will exit automatically. If you sign in again as the assigned access account or wait for the sign in screen timeout, the kiosk app relaunches. The assigned access user will remain signed in until an admin account opens **Task Manager** > **Users** and signs out the user account. diff --git a/windows/configuration/start/customize-and-export-start-layout.md b/windows/configuration/start/customize-and-export-start-layout.md index 952ff48021..725c7c8756 100644 --- a/windows/configuration/start/customize-and-export-start-layout.md +++ b/windows/configuration/start/customize-and-export-start-layout.md @@ -30,16 +30,16 @@ You can deploy the resulting .xml file to devices using one of the following met - [Windows Configuration Designer provisioning package](customize-windows-10-start-screens-by-using-provisioning-packages-and-icd.md) - [Mobile device management (MDM)](customize-windows-10-start-screens-by-using-mobile-device-management.md) -### Customize the Start screen on your test computer +## Customize the Start screen on your test computer To prepare a Start layout for export, you simply customize the Start layout on a test computer. -**To prepare a test computer** +To prepare a test computer: 1. Set up a test computer on which to customize the Start layout. Your test computer should have the operating system that is installed on the users' computers (Windows 10 Pro, Enterprise, or Education). Install all apps and services that the Start layout should display. 1. Create a new user account that you'll use to customize the Start layout. -**To customize Start** +To customize Start: 1. Sign in to your test computer with the user account that you created. 1. Customize the Start layout as you want users to see it by using the following techniques: @@ -63,7 +63,7 @@ When you have the Start layout that you want your users to see, use the [Export- > [!IMPORTANT] > If you include secondary Microsoft Edge tiles (tiles that link to specific websites in Microsoft Edge), see [Add custom images to Microsoft Edge secondary tiles](start-secondary-tiles.md) for instructions. -**To export the Start layout to an .xml file** +To export the Start layout to an .xml file: 1. While signed in with the same account that you used to customize Start, right-click Start, and select **Windows PowerShell**. 1. On a device running Windows 10, version 1607, 1703, or 1803, at the Windows PowerShell command prompt, enter the following command: @@ -109,16 +109,11 @@ When you have the Start layout that you want your users to see, use the [Export- > > For scripts and application tile pins to work correctly, follow these rules: > ->* Executable files and scripts should be listed in \Program Files or wherever the installer of the app places them. -> ->* Shortcuts that will pinned to Start should be placed in \ProgramData\Microsoft\Windows\Start Menu\Programs. - -> ->* If you place executable files or scripts in the \ProgramData\Microsoft\Windows\Start Menu\Programs folder, they will not pin to Start. -> ->* Start on Windows 10 does not support subfolders. We only support one folder. For example, \ProgramData\Microsoft\Windows\Start Menu\Programs\Folder. If you go any deeper than one folder, Start will compress the contents of all the subfolder to the top level. -> ->* Three additional shortcuts are pinned to the start menu after the export. These are shortcuts to %ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs, %APPDATA%\Microsoft\Windows\Start Menu\Programs, and %APPDATA%\Microsoft\Windows\Start Menu\Programs\System Tools\. +>- Executable files and scripts should be listed in \Program Files or wherever the installer of the app places them. +>- Shortcuts that will pinned to Start should be placed in \ProgramData\Microsoft\Windows\Start Menu\Programs. +>- If you place executable files or scripts in the \ProgramData\Microsoft\Windows\Start Menu\Programs folder, they will not pin to Start. +>- Start on Windows 10 does not support subfolders. We only support one folder. For example, \ProgramData\Microsoft\Windows\Start Menu\Programs\Folder. If you go any deeper than one folder, Start will compress the contents of all the subfolder to the top level. +>- Three additional shortcuts are pinned to the start menu after the export. These are shortcuts to %ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs, %APPDATA%\Microsoft\Windows\Start Menu\Programs, and %APPDATA%\Microsoft\Windows\Start Menu\Programs\System Tools\. ### Configure a partial Start layout @@ -132,10 +127,9 @@ When a partial Start layout is applied to a device that already has a StartLayou If the Start layout is applied by Group Policy or MDM, and the policy is removed, the groups remain on the devices but become unlocked. -**To configure a partial Start screen layout** +To configure a partial Start screen layout: 1. [Customize the Start layout](#customize-the-start-screen-on-your-test-computer). - 1. [Export the Start layout](#export-the-start-layout). 1. Open the layout .xml file. There is a `` element. Add `LayoutCustomizationRestrictionType="OnlySpecifiedGroups"` to the **DefaultLayoutOverride** element as follows: diff --git a/windows/configuration/images/start-pinned-app.png b/windows/configuration/start/images/start-pinned-app.png similarity index 100% rename from windows/configuration/images/start-pinned-app.png rename to windows/configuration/start/images/start-pinned-app.png diff --git a/windows/configuration/start/images/taskbar-generic.png b/windows/configuration/start/images/taskbar-generic.png new file mode 100644 index 0000000000..6d47a6795a Binary files /dev/null and b/windows/configuration/start/images/taskbar-generic.png differ diff --git a/windows/configuration/taskbar/configure-windows-10-taskbar.md b/windows/configuration/taskbar/configure-windows-10-taskbar.md index 843ddb075a..b9ac41035d 100644 --- a/windows/configuration/taskbar/configure-windows-10-taskbar.md +++ b/windows/configuration/taskbar/configure-windows-10-taskbar.md @@ -28,19 +28,16 @@ The following example shows how apps will be pinned: Windows default apps to the ![Windows left, user center, enterprise to the right.](images/taskbar-generic.png) ## Configure taskbar (general) -*To configure the taskbar: + +To configure the taskbar: 1. Create the XML file - - If you're also [customizing the Start layout](../start/customize-and-export-start-layout.md), use `Export-StartLayout` to create the XML, and then add the `` section from [the following sample](#sample-taskbar-configuration-added-to-start-layout-xml-file) to the file. - If you're only configuring the taskbar, use [the following sample](#sample-taskbar-configuration-xml-file) to create a layout modification XML file - 1. Edit and save the XML file. You can use [AUMID](../kiosk/find-the-application-user-model-id-of-an-installed-app.md) or Desktop Application Link Path to identify the apps to pin to the taskbar - - Add `xmlns:taskbar="http://schemas.microsoft.com/Start/2014/TaskbarLayout"` to the first line of the file, before the closing \>. - Use `` and [AUMID](../kiosk/find-the-application-user-model-id-of-an-installed-app.md) to pin Universal Windows Platform apps - Use `` and Desktop Application Link Path to pin desktop applications - 1. Apply the layout modification XML file to devices using [Group Policy](../start/customize-windows-10-start-screens-by-using-group-policy.md) or a [provisioning package created in Windows Imaging and Configuration Designer (Windows ICD)](../start/customize-windows-10-start-screens-by-using-provisioning-packages-and-icd.md). >[!IMPORTANT] @@ -80,6 +77,7 @@ The easiest way to find this data for an application is to: ``` + ### Sample taskbar configuration added to Start layout XML file ```xml @@ -171,6 +169,7 @@ If you only want to remove some of the default pinned apps, you would use this m ``` + **Before:** ![Taskbar with default apps.](images/taskbar-default.png) @@ -260,8 +259,6 @@ The resulting taskbar for computers in any other country region: > [!NOTE] > [Look up country and region codes (use the ISO Short column)](/previous-versions/commerce-server/ee799297(v=cs.20)) - - ## Layout Modification Template schema definition ```xml diff --git a/windows/configuration/taskbar/customize-taskbar-windows-11.md b/windows/configuration/taskbar/customize-taskbar-windows-11.md index cc68108deb..6af8ef100f 100644 --- a/windows/configuration/taskbar/customize-taskbar-windows-11.md +++ b/windows/configuration/taskbar/customize-taskbar-windows-11.md @@ -142,7 +142,7 @@ Use the following steps to add your XML file to a group policy, and apply the po Your policy looks like the following policy: - :::image type="content" source="images/customize-taskbar-windows-11/start-layout-group-policy.png" alt-text="Add your taskbar layout XML file to the Start Layout policy on Windows devices."::: + :::image type="content" source="images/start-layout-group-policy.png" alt-text="Add your taskbar layout XML file to the Start Layout policy on Windows devices."::: The `User Configuration\Administrative Templates\Start Menu and Taskbar` policy includes other settings that control the taskbar. Some policies may not work as expected. Be sure to test your policies before broadly deploying them across your devices.