Files
windows-itpro-docs/windows/configuration/assigned-access/shell-launcher-quickstart-kiosk.md
2024-02-16 14:08:37 +01:00

2.8 KiB

title, description, ms.topic, ms.date
title description ms.topic ms.date
Quickstart: configure a kiosk experience with Shell Launcher Learn how to configure a kiosk experience with Shell Launcher, using Windows Configuration Designer, Microsoft Intune, or PowerShell. quickstart 02/05/2024

Quickstart: configure a kiosk experience with Shell Launcher

This quickstart provides the information to configure a kiosk experience with Shell Launcher, using Windows Configuration Designer, Microsoft Intune, or PowerShell.

Prerequisites

[!div class="checklist"] Here's a list of requirements to complete this quickstart:

  • A Windows Enterprise or Education device
  • Microsoft Intune, or a non-Microsoft MDM solution, if you want to configure the settings using MDM
  • Access to the psexec tool, if you want to test the configuration using Windows PowerShell

Configure a kiosk device

[!INCLUDE tab-intro]

:::image type="icon" source="../images/icons/intune.svg"::: Intune/CSP

Tip

Use the following Graph call to automatically create a custom policy in your Microsoft Intune tenant without assignments nor scope tags.

When using this call, authenticate to your tenant in the Graph Explorer window. If it's the first time using Graph Explorer, you may need to authorize the application to access your tenant or to modify the existing permissions. This graph call requires DeviceManagementConfiguration.ReadWrite.All permissions.

[!INCLUDE shell-launcher-quickstart-intune]

[!INCLUDE intune-custom-settings-2]

Alternatively, you can configure devices using a custom policy with the AssignedAccess CSP.

  • Setting: ./Vendor/MSFT/AssignedAccess/ShellLauncher
  • Value:

[!INCLUDE quickstart-shell-launcher-xml]

:::image type="icon" source="../images/icons/powershell.svg"::: PowerShell

[!INCLUDE powershell-wmi-bridge-1]

[!INCLUDE shell-launcher-quickstart-ps]

[!INCLUDE powershell-wmi-bridge-2]


User experience

After the settings are applied, reboot the device. A local user account named Airport Kiosk is automatically signed in, opening Microsoft Edge with an airport map.

Next steps

[!div class="nextstepaction"] Learn more how to configure Windows to execute as a restricted user experience:

Configure a shell launcher configuration