Deploy a Multi App Windows 10 Kiosk with Intune
By: Nathan Blasac
Tags: Intune, Mdm, Kiosk, Windows 10

Here is the quick and dirty:

Criteria: Show Only three apps. Intune, VMWare Horizon Client, and “Show Available Networks” in a tablet layout.

Final Product:

First things First. Get on your reference or technician machine.

Setup the start layout as desired, then run the following command to export your start layout with DesktopApplicationID:

Export-StartLayout -Path 'C:\StartLayout.xml' -UseDesktopApplicationID

Credit to Frank Trout on his response to this thread:

https://techcommunity.microsoft.com/t5/Microsoft-Intune/Windows-10-Enterprise-Start-Menu-in-KIOSK-mode-show-the-expected/td-p/255135

Also, credit to this link on winaero on how to create a shortcut on the “Show Available Networks” screen.

The challenge with “Show Available Networks” is it’s a explorer.exe command.

C:\Windows\explorer.exe ms-availablenetworks:

The ask here is for the kiosk user to be limited to only what’s available on the start layout. A couple of apps and the ability to switch WiFi networks.

You want to follow the winaero link, create the Show Available Networks icon, then pin it to start. Finally you’ll export the Start Layout with the above command, with DesktopApplicationID switch.

You can crack open the start layout XML and copy out the ID later when needing to paste it into the KIOSK app rule.

The question is how do we get the .lnk file onto the machine? You could always place it on your image. I’ve chosen to deploy it as a PowerShell Script.

Here is the script:

$AppLocation = "C:\Windows\explorer.exe" $WshShell = New-Object -ComObject WScript.Shell #$Shortcut = $WshShell.CreateShortcut("$Home\Desktop\Available Networks.lnk") #$Shortcut = $WshShell.CreateShortcut("C:\Users\Public\Desktop\Available Networks.lnk") $Shortcut = $WshShell.CreateShortcut("C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Available Networks.lnk") $Shortcut.TargetPath = $AppLocation $Shortcut.Arguments ="ms-availablenetworks:" $Shortcut.IconLocation = "%SystemRoot%\System32\taskbarcpl.dll,3" $Shortcut.Description ="Show's Available wiFi Networks" $Shortcut.WorkingDirectory ="C:\Windows\" $Shortcut.Save()

Let’s now create the script in Intune, and Deploy it to the intended group.

Now Click Create.

Ensure you assign it to the intended group.

Next we will create the Intune Configuration Profile with Kiosk settings.

Configure as seen below. Click “Add Microsoft Edge”. Then click, “Add Store App, and Select the app you want to include. For this case, VMWare Horizon Client”.

Then to add the “Show Available Networks”, the following will need to be added.

DesktopApplicationID/AUMID for the Win32 app

Microsoft.AutoGenerated.{F0B8149C-2993-30B2-A6FF-111AED31518B}

Click OK.

Here are the rest of the Configuration Profile settings.

Here you will upload the prior Start Layout you created on the reference machine.

Click OK.

Now assign your newly created configuration profile to the intended group.

BONUS: Use this in conjunction with a self deploying autopilot profile (Only supported on TPM 2.0 and above), for a fully self deploying kiosk. Future post to come on that.

Until next time.