mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-05-14 14:27:22 +00:00
Delete quickstart-restricted-experience-xml.md file
This commit is contained in:
Paolo Matarazzo
parent
792b26092e
commit
f752096935
@ -36,12 +36,7 @@ Arguments: --no-first-run --kiosk https://maps.cltairport.com/ --kiosk-idle-time
|
|||||||
>
|
>
|
||||||
> When using this call, authenticate to your tenant in the Graph Explorer window. If it's the first time using Graph Explorer, you may need to authorize the application to access your tenant or to modify the existing permissions. This graph call requires *DeviceManagementConfiguration.ReadWrite.All* permissions.
|
> When using this call, authenticate to your tenant in the Graph Explorer window. If it's the first time using Graph Explorer, you may need to authorize the application to access your tenant or to modify the existing permissions. This graph call requires *DeviceManagementConfiguration.ReadWrite.All* permissions.
|
||||||
|
|
||||||
```msgraph-interactive
|
[!INCLUDE [assigned-access-quickstart-kiosk-intune](includes/assigned-access-quickstart-kiosk-intune.md)]
|
||||||
POST https://graph.microsoft.com/beta/deviceManagement/deviceConfigurations
|
|
||||||
Content-Type: application/json
|
|
||||||
|
|
||||||
{ "id": "00-0000-0000-0000-000000000000", "displayName": "_MSLearn_Example", "description": "Collection of settings for Assigned Access", "roleScopeTagIds": [ "0" ], "@odata.type": "#microsoft.graph.windows10CustomConfiguration", "omaSettings": [ { "@odata.type": "#microsoft.graph.omaSettingString", "displayName": "AssignedAccess_Configuration", "description": null, "omaUri": "./Vendor/MSFT/AssignedAccess/Configuration", "secretReferenceValueId": null, "isEncrypted": true, "value": "<?xml version=\"1.0\" encoding=\"utf-8\" ?>\n<AssignedAccessConfiguration xmlns=\"http://schemas.microsoft.com/AssignedAccess/2017/config\"\n xmlns:rs5=\"http://schemas.microsoft.com/AssignedAccess/201810/config\"\n xmlns:rs5=\"http://schemas.microsoft.com/AssignedAccess/201810/config\"\n xmlns:v3=\"http://schemas.microsoft.com/AssignedAccess/2020/config\"\n xmlns:v5=\"http://schemas.microsoft.com/AssignedAccess/2022/config\"\n xmlns:v5=\"http://schemas.microsoft.com/AssignedAccess/2022/config\"\n >\n <Profiles>\n <Profile Id=\"{9A2A490F-10F6-4764-974A-43B19E722C23}\">\n <AllAppsList>\n <AllowedApps>\n <App AppUserModelId=\"Microsoft.WindowsCalculator_8wekyb3d8bbwe!App\" />\n <App AppUserModelId=\"Microsoft.Windows.Photos_8wekyb3d8bbwe!App\" />\n <App AppUserModelId=\"Microsoft.BingWeather_8wekyb3d8bbwe!App\" />\n <App DesktopAppPath=\"C:\\Windows\\system32\\cmd.exe\" />\n <App DesktopAppPath=\"%windir%\\System32\\WindowsPowerShell\\v1.0\\Powershell.exe\" />\n <App DesktopAppPath=\"%windir%\\explorer.exe\" />\n <App AppUserModelId=\"windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel\" />\n <App AppUserModelId=\"%ProgramFiles(x86)%\\Microsoft\\Edge\\Application\\msedge.exe\" />\n </AllowedApps>\n </AllAppsList>\n <rs5:FileExplorerNamespaceRestrictions>\n <rs5:AllowedNamespace Name=\"Downloads\"/>\n <v3:AllowRemovableDrives/>\n </rs5:FileExplorerNamespaceRestrictions>\n <v5:StartPins>\n <![CDATA[{\n \"pinnedList\":[\n {\"packagedAppId\":\"Microsoft.WindowsCalculator_8wekyb3d8bbwe!App\"},\n {\"packagedAppId\":\"Microsoft.Windows.Photos_8wekyb3d8bbwe!App\"},\n {\"packagedAppId\":\"Microsoft.BingWeather_8wekyb3d8bbwe!App\"},\n {\"desktopAppLink\":\"%APPDATA%\\\\Microsoft\\\\Windows\\\\Start Menu\\\\Programs\\\\System Tools\\\\Command Prompt.lnk\"},\n {\"desktopAppLink\":\"%APPDATA%\\\\Microsoft\\\\Windows\\\\Start Menu\\\\Programs\\\\Windows PowerShell\\\\Windows PowerShell.lnk\"},\n {\"desktopAppLink\":\"%APPDATA%\\\\Microsoft\\\\Windows\\\\Start Menu\\\\Programs\\\\File Explorer.lnk\"},\n {\"packagedAppId\": \"windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel\"},\n {\"desktopAppLink\": \"%ALLUSERSPROFILE%\\\\Microsoft\\\\Windows\\\\Start Menu\\\\Programs\\\\Microsoft Edge.lnk\"}\n ]\n }]]>\n </v5:StartPins>\n <Taskbar ShowTaskbar=\"true\"/>\n </Profile>\n </Profiles>\n <Configs>\n <Config>\n <AutoLogonAccount rs5:DisplayName=\"Library Kiosk\"/>\n <DefaultProfile Id=\"{9A2A490F-10F6-4764-974A-43B19E722C23}\"/>\n </Config>\n </Configs>\n</AssignedAccessConfiguration>" } ] }
|
|
||||||
```
|
|
||||||
|
|
||||||
[!INCLUDE [intune-custom-settings-2](../../../includes/configure/intune-custom-settings-2.md)]
|
[!INCLUDE [intune-custom-settings-2](../../../includes/configure/intune-custom-settings-2.md)]
|
||||||
|
|
||||||
@ -50,7 +45,7 @@ Alternatively, you can configure devices using a [custom policy][MEM-1] with the
|
|||||||
- **Setting:** `./Vendor/MSFT/AssignedAccess/Configuration`
|
- **Setting:** `./Vendor/MSFT/AssignedAccess/Configuration`
|
||||||
- **Value:**
|
- **Value:**
|
||||||
|
|
||||||
[!INCLUDE [quickstart-restricted-experience-xml](includes/quickstart-restricted-experience-xml.md)]
|
[!INCLUDE [assigned-access-quickstart-kiosk-xml](includes/assigned-access-quickstart-kiosk-xml.md)]
|
||||||
|
|
||||||
#### [:::image type="icon" source="../images/icons/provisioning-package.svg"::: **PPKG**](#tab/ppkg)
|
#### [:::image type="icon" source="../images/icons/provisioning-package.svg"::: **PPKG**](#tab/ppkg)
|
||||||
|
|
||||||
@ -59,7 +54,7 @@ Alternatively, you can configure devices using a [custom policy][MEM-1] with the
|
|||||||
- **Path:** `AssignedAccess/MultiAppAssignedAccessSettings`
|
- **Path:** `AssignedAccess/MultiAppAssignedAccessSettings`
|
||||||
- **Value:**
|
- **Value:**
|
||||||
|
|
||||||
[!INCLUDE [quickstart-restricted-experience-xml](includes/quickstart-restricted-experience-xml.md)]
|
[!INCLUDE [assigned-access-quickstart-kiosk-xmll](includes/assigned-access-quickstart-kiosk-xml.md)]
|
||||||
|
|
||||||
[!INCLUDE [provisioning-package-2](../../../includes/configure/provisioning-package-2.md)]
|
[!INCLUDE [provisioning-package-2](../../../includes/configure/provisioning-package-2.md)]
|
||||||
|
|
||||||
@ -67,62 +62,7 @@ Alternatively, you can configure devices using a [custom policy][MEM-1] with the
|
|||||||
|
|
||||||
[!INCLUDE [powershell-wmi-bridge-1](../../../includes/configure/powershell-wmi-bridge-1.md)]
|
[!INCLUDE [powershell-wmi-bridge-1](../../../includes/configure/powershell-wmi-bridge-1.md)]
|
||||||
|
|
||||||
```powershell
|
[!INCLUDE [assigned-access-quickstart-kiosk-ps](includes/assigned-access-quickstart-kiosk-ps.md)]
|
||||||
$assignedAccessConfiguration = @"
|
|
||||||
<?xml version="1.0" encoding="utf-8" ?>
|
|
||||||
<AssignedAccessConfiguration
|
|
||||||
xmlns="http://schemas.microsoft.com/AssignedAccess/2017/config"
|
|
||||||
xmlns:rs5="http://schemas.microsoft.com/AssignedAccess/201810/config"
|
|
||||||
xmlns:v4="http://schemas.microsoft.com/AssignedAccess/2021/config"
|
|
||||||
>
|
|
||||||
<Profiles>
|
|
||||||
<Profile Id="{9A2A490F-10F6-4764-974A-43B19E722C23}">
|
|
||||||
<KioskModeApp v4:ClassicAppPath="%ProgramFiles(x86)%\Microsoft\Edge\Application\msedge.exe" v4:ClassicAppArguments="--kiosk https://maps.cltairport.com/ --edge-kiosk-type=fullscreen --kiosk-idle-timeout-minutes=2" />
|
|
||||||
<v4:BreakoutSequence Key="Ctrl+A"/>
|
|
||||||
</Profile>
|
|
||||||
</Profiles>
|
|
||||||
<Configs>
|
|
||||||
<Config>
|
|
||||||
<AutoLogonAccount rs5:DisplayName="Airport Kiosk"/>
|
|
||||||
<DefaultProfile Id="{9A2A490F-10F6-4764-974A-43B19E722C23}"/>
|
|
||||||
</Config>
|
|
||||||
</Configs>
|
|
||||||
</AssignedAccessConfiguration>
|
|
||||||
"@
|
|
||||||
|
|
||||||
$eventLogFilterHashTable = @{
|
|
||||||
ProviderName = "Microsoft-Windows-AssignedAccess";
|
|
||||||
StartTime = Get-Date -Millisecond 0
|
|
||||||
}
|
|
||||||
|
|
||||||
$namespaceName="root\cimv2\mdm\dmmap"
|
|
||||||
$className="MDM_AssignedAccess"
|
|
||||||
$obj = Get-CimInstance -Namespace $namespaceName -ClassName $className
|
|
||||||
$obj.Configuration = [System.Net.WebUtility]::HtmlEncode($assignedAccessConfiguration)
|
|
||||||
$obj = Set-CimInstance -CimInstance $obj -ErrorVariable cimSetError -ErrorAction SilentlyContinue
|
|
||||||
if($cimSetError) {
|
|
||||||
Write-Output "An ERROR occurred. Displaying error record and attempting to retrieve error logs...`n"
|
|
||||||
Write-Error -ErrorRecord $cimSetError[0]
|
|
||||||
|
|
||||||
$timeout = New-TimeSpan -Seconds 30
|
|
||||||
$stopwatch = [System.Diagnostics.Stopwatch]::StartNew()
|
|
||||||
do{
|
|
||||||
$events = Get-WinEvent -FilterHashtable $eventLogFilterHashTable -ErrorAction Ignore
|
|
||||||
} until ($events.Count -or $stopwatch.Elapsed -gt $timeout) # wait for the log to be available
|
|
||||||
|
|
||||||
if($events.Count) {
|
|
||||||
$events | ForEach-Object {
|
|
||||||
Write-Output "$($_.TimeCreated) [$($_.LevelDisplayName.ToUpper())] $($_.Message -replace "`n|`r")"
|
|
||||||
}
|
|
||||||
} else {
|
|
||||||
Write-Warning "Timed-out attempting to retrieve event logs..."
|
|
||||||
}
|
|
||||||
|
|
||||||
Exit 1
|
|
||||||
}
|
|
||||||
|
|
||||||
Write-Output "Successfully applied Assigned Access configuration"
|
|
||||||
```
|
|
||||||
|
|
||||||
[!INCLUDE [powershell-wmi-bridge-2](../../../includes/configure/powershell-wmi-bridge-2.md)]
|
[!INCLUDE [powershell-wmi-bridge-2](../../../includes/configure/powershell-wmi-bridge-2.md)]
|
||||||
|
|
||||||
@ -130,9 +70,7 @@ Write-Output "Successfully applied Assigned Access configuration"
|
|||||||
|
|
||||||
## User experience
|
## User experience
|
||||||
|
|
||||||
After the settings are applied, reboot the device. A user account named `Library Kiosk` is automatically signed in, with access to a limited set of applications, which are pinned to the Start menu.
|
After the settings are applied, reboot the device. A user account named `Airport Kiosk` is automatically signed in, opening Microsoft Edge with an airport map.
|
||||||
|
|
||||||
:::image type="content" source="images/quickstart-restricted-experience.png" alt-text="Screenshot of the Windows desktop used for the quickstart." border="false":::
|
|
||||||
|
|
||||||
## Next steps
|
## Next steps
|
||||||
|
|
||||||
|
|||||||
@ -36,12 +36,7 @@ The examples can be modified to fit your specific requirements. For example, you
|
|||||||
>
|
>
|
||||||
> When using this call, authenticate to your tenant in the Graph Explorer window. If it's the first time using Graph Explorer, you may need to authorize the application to access your tenant or to modify the existing permissions. This graph call requires *DeviceManagementConfiguration.ReadWrite.All* permissions.
|
> When using this call, authenticate to your tenant in the Graph Explorer window. If it's the first time using Graph Explorer, you may need to authorize the application to access your tenant or to modify the existing permissions. This graph call requires *DeviceManagementConfiguration.ReadWrite.All* permissions.
|
||||||
|
|
||||||
```msgraph-interactive
|
[!INCLUDE [assigned-access-quickstart-restricted-experience-intune](includes/assigned-access-quickstart-restricted-experience-intune.md)]
|
||||||
POST https://graph.microsoft.com/beta/deviceManagement/deviceConfigurations
|
|
||||||
Content-Type: application/json
|
|
||||||
|
|
||||||
{ "id": "00-0000-0000-0000-000000000000", "displayName": "_MSLearn_Example", "description": "Collection of settings for Assigned Access", "roleScopeTagIds": [ "0" ], "@odata.type": "#microsoft.graph.windows10CustomConfiguration", "omaSettings": [ { "@odata.type": "#microsoft.graph.omaSettingString", "displayName": "AssignedAccess_Configuration", "description": null, "omaUri": "./Vendor/MSFT/AssignedAccess/Configuration", "secretReferenceValueId": null, "isEncrypted": true, "value": "<?xml version=\"1.0\" encoding=\"utf-8\" ?>\n<AssignedAccessConfiguration xmlns=\"http://schemas.microsoft.com/AssignedAccess/2017/config\"\n xmlns:rs5=\"http://schemas.microsoft.com/AssignedAccess/201810/config\"\n xmlns:rs5=\"http://schemas.microsoft.com/AssignedAccess/201810/config\"\n xmlns:v3=\"http://schemas.microsoft.com/AssignedAccess/2020/config\"\n xmlns:v5=\"http://schemas.microsoft.com/AssignedAccess/2022/config\"\n xmlns:v5=\"http://schemas.microsoft.com/AssignedAccess/2022/config\"\n >\n <Profiles>\n <Profile Id=\"{9A2A490F-10F6-4764-974A-43B19E722C23}\">\n <AllAppsList>\n <AllowedApps>\n <App AppUserModelId=\"Microsoft.WindowsCalculator_8wekyb3d8bbwe!App\" />\n <App AppUserModelId=\"Microsoft.Windows.Photos_8wekyb3d8bbwe!App\" />\n <App AppUserModelId=\"Microsoft.BingWeather_8wekyb3d8bbwe!App\" />\n <App DesktopAppPath=\"C:\\Windows\\system32\\cmd.exe\" />\n <App DesktopAppPath=\"%windir%\\System32\\WindowsPowerShell\\v1.0\\Powershell.exe\" />\n <App DesktopAppPath=\"%windir%\\explorer.exe\" />\n <App AppUserModelId=\"windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel\" />\n <App AppUserModelId=\"%ProgramFiles(x86)%\\Microsoft\\Edge\\Application\\msedge.exe\" />\n </AllowedApps>\n </AllAppsList>\n <rs5:FileExplorerNamespaceRestrictions>\n <rs5:AllowedNamespace Name=\"Downloads\"/>\n <v3:AllowRemovableDrives/>\n </rs5:FileExplorerNamespaceRestrictions>\n <v5:StartPins>\n <![CDATA[{\n \"pinnedList\":[\n {\"packagedAppId\":\"Microsoft.WindowsCalculator_8wekyb3d8bbwe!App\"},\n {\"packagedAppId\":\"Microsoft.Windows.Photos_8wekyb3d8bbwe!App\"},\n {\"packagedAppId\":\"Microsoft.BingWeather_8wekyb3d8bbwe!App\"},\n {\"desktopAppLink\":\"%APPDATA%\\\\Microsoft\\\\Windows\\\\Start Menu\\\\Programs\\\\System Tools\\\\Command Prompt.lnk\"},\n {\"desktopAppLink\":\"%APPDATA%\\\\Microsoft\\\\Windows\\\\Start Menu\\\\Programs\\\\Windows PowerShell\\\\Windows PowerShell.lnk\"},\n {\"desktopAppLink\":\"%APPDATA%\\\\Microsoft\\\\Windows\\\\Start Menu\\\\Programs\\\\File Explorer.lnk\"},\n {\"packagedAppId\": \"windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel\"},\n {\"desktopAppLink\": \"%ALLUSERSPROFILE%\\\\Microsoft\\\\Windows\\\\Start Menu\\\\Programs\\\\Microsoft Edge.lnk\"}\n ]\n }]]>\n </v5:StartPins>\n <Taskbar ShowTaskbar=\"true\"/>\n </Profile>\n </Profiles>\n <Configs>\n <Config>\n <AutoLogonAccount rs5:DisplayName=\"Library Kiosk\"/>\n <DefaultProfile Id=\"{9A2A490F-10F6-4764-974A-43B19E722C23}\"/>\n </Config>\n </Configs>\n</AssignedAccessConfiguration>" } ] }
|
|
||||||
```
|
|
||||||
|
|
||||||
[!INCLUDE [intune-custom-settings-2](../../../includes/configure/intune-custom-settings-2.md)]
|
[!INCLUDE [intune-custom-settings-2](../../../includes/configure/intune-custom-settings-2.md)]
|
||||||
|
|
||||||
@ -50,7 +45,7 @@ Alternatively, you can configure devices using a [custom policy][MEM-1] with the
|
|||||||
- **Setting:** `./Vendor/MSFT/AssignedAccess/Configuration`
|
- **Setting:** `./Vendor/MSFT/AssignedAccess/Configuration`
|
||||||
- **Value:**
|
- **Value:**
|
||||||
|
|
||||||
[!INCLUDE [quickstart-restricted-experience-xml](includes/quickstart-restricted-experience-xml.md)]
|
[!INCLUDE [assigned-access-quickstart-restricted-experience-xml.md](includes/assigned-access-quickstart-restricted-experience-xml.md)]
|
||||||
|
|
||||||
#### [:::image type="icon" source="../images/icons/provisioning-package.svg"::: **PPKG**](#tab/ppkg)
|
#### [:::image type="icon" source="../images/icons/provisioning-package.svg"::: **PPKG**](#tab/ppkg)
|
||||||
|
|
||||||
@ -59,7 +54,7 @@ Alternatively, you can configure devices using a [custom policy][MEM-1] with the
|
|||||||
- **Path:** `AssignedAccess/MultiAppAssignedAccessSettings`
|
- **Path:** `AssignedAccess/MultiAppAssignedAccessSettings`
|
||||||
- **Value:**
|
- **Value:**
|
||||||
|
|
||||||
[!INCLUDE [quickstart-restricted-experience-xml](includes/quickstart-restricted-experience-xml.md)]
|
[!INCLUDE [assigned-access-quickstart-restricted-experience-xml.md](includes/assigned-access-quickstart-restricted-experience-xml.md)]
|
||||||
|
|
||||||
[!INCLUDE [provisioning-package-2](../../../includes/configure/provisioning-package-2.md)]
|
[!INCLUDE [provisioning-package-2](../../../includes/configure/provisioning-package-2.md)]
|
||||||
|
|
||||||
@ -67,92 +62,7 @@ Alternatively, you can configure devices using a [custom policy][MEM-1] with the
|
|||||||
|
|
||||||
[!INCLUDE [powershell-wmi-bridge-1](../../../includes/configure/powershell-wmi-bridge-1.md)]
|
[!INCLUDE [powershell-wmi-bridge-1](../../../includes/configure/powershell-wmi-bridge-1.md)]
|
||||||
|
|
||||||
```powershell
|
[!INCLUDE [assigned-access-quickstart-restricted-experience-ps](includes/assigned-access-quickstart-restricted-experience-ps.md)]
|
||||||
$assignedAccessConfiguration = @"
|
|
||||||
<?xml version="1.0" encoding="utf-8" ?>
|
|
||||||
<AssignedAccessConfiguration
|
|
||||||
xmlns="http://schemas.microsoft.com/AssignedAccess/2017/config"
|
|
||||||
xmlns:rs5="http://schemas.microsoft.com/AssignedAccess/201810/config"
|
|
||||||
xmlns:v3="http://schemas.microsoft.com/AssignedAccess/2020/config"
|
|
||||||
xmlns:v5="http://schemas.microsoft.com/AssignedAccess/2022/config"
|
|
||||||
>
|
|
||||||
<Profiles>
|
|
||||||
<Profile Id="{9A2A490F-10F6-4764-974A-43B19E722C23}">
|
|
||||||
<AllAppsList>
|
|
||||||
<AllowedApps>
|
|
||||||
<App AppUserModelId="Microsoft.WindowsCalculator_8wekyb3d8bbwe!App" />
|
|
||||||
<App AppUserModelId="Microsoft.Windows.Photos_8wekyb3d8bbwe!App" />
|
|
||||||
<App AppUserModelId="Microsoft.BingWeather_8wekyb3d8bbwe!App" />
|
|
||||||
<App DesktopAppPath="%windir%\System32\cmd.exe" />
|
|
||||||
<App DesktopAppPath="%windir%\System32\WindowsPowerShell\v1.0\Powershell.exe" />
|
|
||||||
<App DesktopAppPath="%windir%\explorer.exe" />
|
|
||||||
<App AppUserModelId="windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel" />
|
|
||||||
<App AppUserModelId="%ProgramFiles(x86)%\Microsoft\Edge\Application\msedge.exe" />
|
|
||||||
</AllowedApps>
|
|
||||||
</AllAppsList>
|
|
||||||
<rs5:FileExplorerNamespaceRestrictions>
|
|
||||||
<rs5:AllowedNamespace Name="Downloads"/>
|
|
||||||
<v3:AllowRemovableDrives/>
|
|
||||||
</rs5:FileExplorerNamespaceRestrictions>
|
|
||||||
<v5:StartPins>
|
|
||||||
<![CDATA[{
|
|
||||||
"pinnedList":[
|
|
||||||
{"packagedAppId":"Microsoft.WindowsCalculator_8wekyb3d8bbwe!App"},
|
|
||||||
{"packagedAppId":"Microsoft.Windows.Photos_8wekyb3d8bbwe!App"},
|
|
||||||
{"packagedAppId":"Microsoft.BingWeather_8wekyb3d8bbwe!App"},
|
|
||||||
{"desktopAppLink":"%APPDATA%\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Command Prompt.lnk"},
|
|
||||||
{"desktopAppLink":"%APPDATA%\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell.lnk"},
|
|
||||||
{"desktopAppLink":"%APPDATA%\\Microsoft\\Windows\\Start Menu\\Programs\\File Explorer.lnk"},
|
|
||||||
{"packagedAppId": "windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel"},
|
|
||||||
{"desktopAppLink": "%ALLUSERSPROFILE%\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Edge.lnk"}
|
|
||||||
]
|
|
||||||
}]]>
|
|
||||||
</v5:StartPins>
|
|
||||||
<Taskbar ShowTaskbar="true"/>
|
|
||||||
</Profile>
|
|
||||||
</Profiles>
|
|
||||||
<Configs>
|
|
||||||
<Config>
|
|
||||||
<AutoLogonAccount rs5:DisplayName="Library Kiosk"/>
|
|
||||||
<DefaultProfile Id="{9A2A490F-10F6-4764-974A-43B19E722C23}"/>
|
|
||||||
</Config>
|
|
||||||
</Configs>
|
|
||||||
</AssignedAccessConfiguration>
|
|
||||||
"@
|
|
||||||
|
|
||||||
$eventLogFilterHashTable = @{
|
|
||||||
ProviderName = "Microsoft-Windows-AssignedAccess";
|
|
||||||
StartTime = Get-Date -Millisecond 0
|
|
||||||
}
|
|
||||||
|
|
||||||
$namespaceName="root\cimv2\mdm\dmmap"
|
|
||||||
$className="MDM_AssignedAccess"
|
|
||||||
$obj = Get-CimInstance -Namespace $namespaceName -ClassName $className
|
|
||||||
$obj.Configuration = [System.Net.WebUtility]::HtmlEncode($assignedAccessConfiguration)
|
|
||||||
$obj = Set-CimInstance -CimInstance $obj -ErrorVariable cimSetError -ErrorAction SilentlyContinue
|
|
||||||
if($cimSetError) {
|
|
||||||
Write-Output "An ERROR occurred. Displaying error record and attempting to retrieve error logs...`n"
|
|
||||||
Write-Error -ErrorRecord $cimSetError[0]
|
|
||||||
|
|
||||||
$timeout = New-TimeSpan -Seconds 30
|
|
||||||
$stopwatch = [System.Diagnostics.Stopwatch]::StartNew()
|
|
||||||
do{
|
|
||||||
$events = Get-WinEvent -FilterHashtable $eventLogFilterHashTable -ErrorAction Ignore
|
|
||||||
} until ($events.Count -or $stopwatch.Elapsed -gt $timeout) # wait for the log to be available
|
|
||||||
|
|
||||||
if($events.Count) {
|
|
||||||
$events | ForEach-Object {
|
|
||||||
Write-Output "$($_.TimeCreated) [$($_.LevelDisplayName.ToUpper())] $($_.Message -replace "`n|`r")"
|
|
||||||
}
|
|
||||||
} else {
|
|
||||||
Write-Warning "Timed-out attempting to retrieve event logs..."
|
|
||||||
}
|
|
||||||
|
|
||||||
Exit 1
|
|
||||||
}
|
|
||||||
|
|
||||||
Write-Output "Successfully applied Assigned Access configuration"
|
|
||||||
```
|
|
||||||
|
|
||||||
[!INCLUDE [powershell-wmi-bridge-2](../../../includes/configure/powershell-wmi-bridge-2.md)]
|
[!INCLUDE [powershell-wmi-bridge-2](../../../includes/configure/powershell-wmi-bridge-2.md)]
|
||||||
|
|
||||||
|
|||||||
@ -0,0 +1,14 @@
|
|||||||
|
---
|
||||||
|
author: paolomatarazzo
|
||||||
|
ms.author: paoloma
|
||||||
|
ms.date: 02/05/2024
|
||||||
|
ms.topic: include
|
||||||
|
ms.prod: windows-client
|
||||||
|
---
|
||||||
|
|
||||||
|
```msgraph-interactive
|
||||||
|
POST https://graph.microsoft.com/beta/deviceManagement/deviceConfigurations
|
||||||
|
Content-Type: application/json
|
||||||
|
|
||||||
|
{ "id": "00000000-0000-0000-0000-000000000000", "displayName": "_MSLearn_Example_Kiosk - Assigned Access", "description": "This is a sample policy created from an article on learn.microsoft.com.", "roleScopeTagIds": [ "0" ], "@odata.type": "#microsoft.graph.windows10CustomConfiguration", "omaSettings": [ { "omaUri": "./Vendor/MSFT/AssignedAccess/Configuration", "displayName": "Configuration", "@odata.type": "#microsoft.graph.omaSettingString", "value": "<?xml version=\"1.0\" encoding=\"utf-8\" ?>\n<AssignedAccessConfiguration\n xmlns=\"http://schemas.microsoft.com/AssignedAccess/2017/config\"\n xmlns:rs5=\"http://schemas.microsoft.com/AssignedAccess/201810/config\"\n xmlns:v4=\"http://schemas.microsoft.com/AssignedAccess/2021/config\"\n >\n <Profiles>\n <Profile Id=\"{EDB3036B-780D-487D-A375-69369D8A8F78}\">\n <KioskModeApp v4:ClassicAppPath=\"%ProgramFiles(x86)%\\Microsoft\\Edge\\Application\\msedge.exe\" v4:ClassicAppArguments=\"--kiosk https://maps.cltairport.com/ --edge-kiosk-type=fullscreen --kiosk-idle-timeout-minutes=2\" />\n <v4:BreakoutSequence Key=\"Ctrl+A\"/>\n </Profile>\n </Profiles>\n <Configs>\n <Config>\n <AutoLogonAccount rs5:DisplayName=\"Airport Kiosk\"/>\n <DefaultProfile Id=\"{EDB3036B-780D-487D-A375-69369D8A8F78}\"/>\n </Config>\n </Configs>\n</AssignedAccessConfiguration>" } ] }
|
||||||
|
```
|
||||||
@ -0,0 +1,64 @@
|
|||||||
|
---
|
||||||
|
author: paolomatarazzo
|
||||||
|
ms.author: paoloma
|
||||||
|
ms.date: 02/05/2024
|
||||||
|
ms.topic: include
|
||||||
|
ms.prod: windows-client
|
||||||
|
---
|
||||||
|
|
||||||
|
```powershell
|
||||||
|
$assignedAccessConfiguration = @"
|
||||||
|
<?xml version="1.0" encoding="utf-8" ?>
|
||||||
|
<AssignedAccessConfiguration
|
||||||
|
xmlns="http://schemas.microsoft.com/AssignedAccess/2017/config"
|
||||||
|
xmlns:rs5="http://schemas.microsoft.com/AssignedAccess/201810/config"
|
||||||
|
xmlns:v4="http://schemas.microsoft.com/AssignedAccess/2021/config"
|
||||||
|
>
|
||||||
|
<Profiles>
|
||||||
|
<Profile Id="{EDB3036B-780D-487D-A375-69369D8A8F78}">
|
||||||
|
<KioskModeApp v4:ClassicAppPath="%ProgramFiles(x86)%\Microsoft\Edge\Application\msedge.exe" v4:ClassicAppArguments="--kiosk https://maps.cltairport.com/ --edge-kiosk-type=fullscreen --kiosk-idle-timeout-minutes=2" />
|
||||||
|
<v4:BreakoutSequence Key="Ctrl+A"/>
|
||||||
|
</Profile>
|
||||||
|
</Profiles>
|
||||||
|
<Configs>
|
||||||
|
<Config>
|
||||||
|
<AutoLogonAccount rs5:DisplayName="Airport Kiosk"/>
|
||||||
|
<DefaultProfile Id="{EDB3036B-780D-487D-A375-69369D8A8F78}"/>
|
||||||
|
</Config>
|
||||||
|
</Configs>
|
||||||
|
</AssignedAccessConfiguration>
|
||||||
|
"@
|
||||||
|
|
||||||
|
$eventLogFilterHashTable = @{
|
||||||
|
ProviderName = "Microsoft-Windows-AssignedAccess";
|
||||||
|
StartTime = Get-Date -Millisecond 0
|
||||||
|
}
|
||||||
|
|
||||||
|
$namespaceName="root\cimv2\mdm\dmmap"
|
||||||
|
$className="MDM_AssignedAccess"
|
||||||
|
$obj = Get-CimInstance -Namespace $namespaceName -ClassName $className
|
||||||
|
$obj.Configuration = [System.Net.WebUtility]::HtmlEncode($assignedAccessConfiguration)
|
||||||
|
$obj = Set-CimInstance -CimInstance $obj -ErrorVariable cimSetError -ErrorAction SilentlyContinue
|
||||||
|
if($cimSetError) {
|
||||||
|
Write-Output "An ERROR occurred. Displaying error record and attempting to retrieve error logs...`n"
|
||||||
|
Write-Error -ErrorRecord $cimSetError[0]
|
||||||
|
|
||||||
|
$timeout = New-TimeSpan -Seconds 30
|
||||||
|
$stopwatch = [System.Diagnostics.Stopwatch]::StartNew()
|
||||||
|
do{
|
||||||
|
$events = Get-WinEvent -FilterHashtable $eventLogFilterHashTable -ErrorAction Ignore
|
||||||
|
} until ($events.Count -or $stopwatch.Elapsed -gt $timeout) # wait for the log to be available
|
||||||
|
|
||||||
|
if($events.Count) {
|
||||||
|
$events | ForEach-Object {
|
||||||
|
Write-Output "$($_.TimeCreated) [$($_.LevelDisplayName.ToUpper())] $($_.Message -replace "`n|`r")"
|
||||||
|
}
|
||||||
|
} else {
|
||||||
|
Write-Warning "Timed-out attempting to retrieve event logs..."
|
||||||
|
}
|
||||||
|
|
||||||
|
Exit 1
|
||||||
|
}
|
||||||
|
|
||||||
|
Write-Output "Successfully applied Assigned Access configuration"
|
||||||
|
```
|
||||||
@ -0,0 +1,29 @@
|
|||||||
|
---
|
||||||
|
author: paolomatarazzo
|
||||||
|
ms.author: paoloma
|
||||||
|
ms.date: 02/05/2024
|
||||||
|
ms.topic: include
|
||||||
|
ms.prod: windows-client
|
||||||
|
---
|
||||||
|
|
||||||
|
```xml
|
||||||
|
<?xml version="1.0" encoding="utf-8" ?>
|
||||||
|
<AssignedAccessConfiguration
|
||||||
|
xmlns="http://schemas.microsoft.com/AssignedAccess/2017/config"
|
||||||
|
xmlns:rs5="http://schemas.microsoft.com/AssignedAccess/201810/config"
|
||||||
|
xmlns:v4="http://schemas.microsoft.com/AssignedAccess/2021/config"
|
||||||
|
>
|
||||||
|
<Profiles>
|
||||||
|
<Profile Id="{EDB3036B-780D-487D-A375-69369D8A8F78}">
|
||||||
|
<KioskModeApp v4:ClassicAppPath="%ProgramFiles(x86)%\Microsoft\Edge\Application\msedge.exe" v4:ClassicAppArguments="--kiosk https://maps.cltairport.com/ --edge-kiosk-type=fullscreen --kiosk-idle-timeout-minutes=2" />
|
||||||
|
<v4:BreakoutSequence Key="Ctrl+A"/>
|
||||||
|
</Profile>
|
||||||
|
</Profiles>
|
||||||
|
<Configs>
|
||||||
|
<Config>
|
||||||
|
<AutoLogonAccount rs5:DisplayName="Airport Kiosk"/>
|
||||||
|
<DefaultProfile Id="{EDB3036B-780D-487D-A375-69369D8A8F78}"/>
|
||||||
|
</Config>
|
||||||
|
</Configs>
|
||||||
|
</AssignedAccessConfiguration>
|
||||||
|
```
|
||||||
@ -0,0 +1,14 @@
|
|||||||
|
---
|
||||||
|
author: paolomatarazzo
|
||||||
|
ms.author: paoloma
|
||||||
|
ms.date: 02/05/2024
|
||||||
|
ms.topic: include
|
||||||
|
ms.prod: windows-client
|
||||||
|
---
|
||||||
|
|
||||||
|
```msgraph-interactive
|
||||||
|
POST https://graph.microsoft.com/beta/deviceManagement/deviceConfigurations
|
||||||
|
Content-Type: application/json
|
||||||
|
|
||||||
|
{ "id": "00-0000-0000-0000-000000000000", "displayName": "_MSLearn_Example", "description": "Collection of settings for Assigned Access", "roleScopeTagIds": [ "0" ], "@odata.type": "#microsoft.graph.windows10CustomConfiguration", "omaSettings": [ { "@odata.type": "#microsoft.graph.omaSettingString", "displayName": "AssignedAccess_Configuration", "description": null, "omaUri": "./Vendor/MSFT/AssignedAccess/Configuration", "secretReferenceValueId": null, "isEncrypted": true, "value": "<?xml version=\"1.0\" encoding=\"utf-8\" ?>\n<AssignedAccessConfiguration xmlns=\"http://schemas.microsoft.com/AssignedAccess/2017/config\"\n xmlns:rs5=\"http://schemas.microsoft.com/AssignedAccess/201810/config\"\n xmlns:rs5=\"http://schemas.microsoft.com/AssignedAccess/201810/config\"\n xmlns:v3=\"http://schemas.microsoft.com/AssignedAccess/2020/config\"\n xmlns:v5=\"http://schemas.microsoft.com/AssignedAccess/2022/config\"\n xmlns:v5=\"http://schemas.microsoft.com/AssignedAccess/2022/config\"\n >\n <Profiles>\n <Profile Id=\"{9A2A490F-10F6-4764-974A-43B19E722C23}\">\n <AllAppsList>\n <AllowedApps>\n <App AppUserModelId=\"Microsoft.WindowsCalculator_8wekyb3d8bbwe!App\" />\n <App AppUserModelId=\"Microsoft.Windows.Photos_8wekyb3d8bbwe!App\" />\n <App AppUserModelId=\"Microsoft.BingWeather_8wekyb3d8bbwe!App\" />\n <App DesktopAppPath=\"C:\\Windows\\system32\\cmd.exe\" />\n <App DesktopAppPath=\"%windir%\\System32\\WindowsPowerShell\\v1.0\\Powershell.exe\" />\n <App DesktopAppPath=\"%windir%\\explorer.exe\" />\n <App AppUserModelId=\"windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel\" />\n <App AppUserModelId=\"%ProgramFiles(x86)%\\Microsoft\\Edge\\Application\\msedge.exe\" />\n </AllowedApps>\n </AllAppsList>\n <rs5:FileExplorerNamespaceRestrictions>\n <rs5:AllowedNamespace Name=\"Downloads\"/>\n <v3:AllowRemovableDrives/>\n </rs5:FileExplorerNamespaceRestrictions>\n <v5:StartPins>\n <![CDATA[{\n \"pinnedList\":[\n {\"packagedAppId\":\"Microsoft.WindowsCalculator_8wekyb3d8bbwe!App\"},\n {\"packagedAppId\":\"Microsoft.Windows.Photos_8wekyb3d8bbwe!App\"},\n {\"packagedAppId\":\"Microsoft.BingWeather_8wekyb3d8bbwe!App\"},\n {\"desktopAppLink\":\"%APPDATA%\\\\Microsoft\\\\Windows\\\\Start Menu\\\\Programs\\\\System Tools\\\\Command Prompt.lnk\"},\n {\"desktopAppLink\":\"%APPDATA%\\\\Microsoft\\\\Windows\\\\Start Menu\\\\Programs\\\\Windows PowerShell\\\\Windows PowerShell.lnk\"},\n {\"desktopAppLink\":\"%APPDATA%\\\\Microsoft\\\\Windows\\\\Start Menu\\\\Programs\\\\File Explorer.lnk\"},\n {\"packagedAppId\": \"windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel\"},\n {\"desktopAppLink\": \"%ALLUSERSPROFILE%\\\\Microsoft\\\\Windows\\\\Start Menu\\\\Programs\\\\Microsoft Edge.lnk\"}\n ]\n }]]>\n </v5:StartPins>\n <Taskbar ShowTaskbar=\"true\"/>\n </Profile>\n </Profiles>\n <Configs>\n <Config>\n <AutoLogonAccount rs5:DisplayName=\"Library Kiosk\"/>\n <DefaultProfile Id=\"{9A2A490F-10F6-4764-974A-43B19E722C23}\"/>\n </Config>\n </Configs>\n</AssignedAccessConfiguration>" } ] }
|
||||||
|
```
|
||||||
@ -0,0 +1,94 @@
|
|||||||
|
---
|
||||||
|
author: paolomatarazzo
|
||||||
|
ms.author: paoloma
|
||||||
|
ms.date: 02/05/2024
|
||||||
|
ms.topic: include
|
||||||
|
ms.prod: windows-client
|
||||||
|
---
|
||||||
|
|
||||||
|
```powershell
|
||||||
|
$assignedAccessConfiguration = @"
|
||||||
|
<?xml version="1.0" encoding="utf-8" ?>
|
||||||
|
<AssignedAccessConfiguration
|
||||||
|
xmlns="http://schemas.microsoft.com/AssignedAccess/2017/config"
|
||||||
|
xmlns:rs5="http://schemas.microsoft.com/AssignedAccess/201810/config"
|
||||||
|
xmlns:v3="http://schemas.microsoft.com/AssignedAccess/2020/config"
|
||||||
|
xmlns:v5="http://schemas.microsoft.com/AssignedAccess/2022/config"
|
||||||
|
>
|
||||||
|
<Profiles>
|
||||||
|
<Profile Id="{9A2A490F-10F6-4764-974A-43B19E722C23}">
|
||||||
|
<AllAppsList>
|
||||||
|
<AllowedApps>
|
||||||
|
<App AppUserModelId="Microsoft.WindowsCalculator_8wekyb3d8bbwe!App" />
|
||||||
|
<App AppUserModelId="Microsoft.Windows.Photos_8wekyb3d8bbwe!App" />
|
||||||
|
<App AppUserModelId="Microsoft.BingWeather_8wekyb3d8bbwe!App" />
|
||||||
|
<App DesktopAppPath="%windir%\System32\cmd.exe" />
|
||||||
|
<App DesktopAppPath="%windir%\System32\WindowsPowerShell\v1.0\Powershell.exe" />
|
||||||
|
<App DesktopAppPath="%windir%\explorer.exe" />
|
||||||
|
<App AppUserModelId="windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel" />
|
||||||
|
<App AppUserModelId="%ProgramFiles(x86)%\Microsoft\Edge\Application\msedge.exe" />
|
||||||
|
</AllowedApps>
|
||||||
|
</AllAppsList>
|
||||||
|
<rs5:FileExplorerNamespaceRestrictions>
|
||||||
|
<rs5:AllowedNamespace Name="Downloads"/>
|
||||||
|
<v3:AllowRemovableDrives/>
|
||||||
|
</rs5:FileExplorerNamespaceRestrictions>
|
||||||
|
<v5:StartPins>
|
||||||
|
<![CDATA[{
|
||||||
|
"pinnedList":[
|
||||||
|
{"packagedAppId":"Microsoft.WindowsCalculator_8wekyb3d8bbwe!App"},
|
||||||
|
{"packagedAppId":"Microsoft.Windows.Photos_8wekyb3d8bbwe!App"},
|
||||||
|
{"packagedAppId":"Microsoft.BingWeather_8wekyb3d8bbwe!App"},
|
||||||
|
{"desktopAppLink":"%APPDATA%\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Command Prompt.lnk"},
|
||||||
|
{"desktopAppLink":"%APPDATA%\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell.lnk"},
|
||||||
|
{"desktopAppLink":"%APPDATA%\\Microsoft\\Windows\\Start Menu\\Programs\\File Explorer.lnk"},
|
||||||
|
{"packagedAppId": "windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel"},
|
||||||
|
{"desktopAppLink": "%ALLUSERSPROFILE%\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Edge.lnk"}
|
||||||
|
]
|
||||||
|
}]]>
|
||||||
|
</v5:StartPins>
|
||||||
|
<Taskbar ShowTaskbar="true"/>
|
||||||
|
</Profile>
|
||||||
|
</Profiles>
|
||||||
|
<Configs>
|
||||||
|
<Config>
|
||||||
|
<AutoLogonAccount rs5:DisplayName="Library Kiosk"/>
|
||||||
|
<DefaultProfile Id="{9A2A490F-10F6-4764-974A-43B19E722C23}"/>
|
||||||
|
</Config>
|
||||||
|
</Configs>
|
||||||
|
</AssignedAccessConfiguration>
|
||||||
|
"@
|
||||||
|
|
||||||
|
$eventLogFilterHashTable = @{
|
||||||
|
ProviderName = "Microsoft-Windows-AssignedAccess";
|
||||||
|
StartTime = Get-Date -Millisecond 0
|
||||||
|
}
|
||||||
|
|
||||||
|
$namespaceName="root\cimv2\mdm\dmmap"
|
||||||
|
$className="MDM_AssignedAccess"
|
||||||
|
$obj = Get-CimInstance -Namespace $namespaceName -ClassName $className
|
||||||
|
$obj.Configuration = [System.Net.WebUtility]::HtmlEncode($assignedAccessConfiguration)
|
||||||
|
$obj = Set-CimInstance -CimInstance $obj -ErrorVariable cimSetError -ErrorAction SilentlyContinue
|
||||||
|
if($cimSetError) {
|
||||||
|
Write-Output "An ERROR occurred. Displaying error record and attempting to retrieve error logs...`n"
|
||||||
|
Write-Error -ErrorRecord $cimSetError[0]
|
||||||
|
|
||||||
|
$timeout = New-TimeSpan -Seconds 30
|
||||||
|
$stopwatch = [System.Diagnostics.Stopwatch]::StartNew()
|
||||||
|
do{
|
||||||
|
$events = Get-WinEvent -FilterHashtable $eventLogFilterHashTable -ErrorAction Ignore
|
||||||
|
} until ($events.Count -or $stopwatch.Elapsed -gt $timeout) # wait for the log to be available
|
||||||
|
|
||||||
|
if($events.Count) {
|
||||||
|
$events | ForEach-Object {
|
||||||
|
Write-Output "$($_.TimeCreated) [$($_.LevelDisplayName.ToUpper())] $($_.Message -replace "`n|`r")"
|
||||||
|
}
|
||||||
|
} else {
|
||||||
|
Write-Warning "Timed-out attempting to retrieve event logs..."
|
||||||
|
}
|
||||||
|
|
||||||
|
Exit 1
|
||||||
|
}
|
||||||
|
|
||||||
|
Write-Output "Successfully applied Assigned Access configuration"
|
||||||
|
```
|
||||||
Loading…
x
Reference in New Issue
Block a user