Configuring Windows Kiosk Lockdown

This document provides a detailed walkthrough of configuring Windows Kiosk Lockdown. The feature enables administrators to limit Windows devices to specific applications or web content, ideal for public kiosks, exam systems, or customer-facing terminals. It covers setting up single-app, multi-app, and website kiosks, including the customization of user experiences.

Step 1

Begin by navigating to the Policies tab to start the configuration of the Windows Kiosk Lockdown feature.

Step 2

Proceed to create a new policy. You have the option to choose from a template or create a completely new policy. Select your desired platform and click 'Next'.

Step 3

Since our focus is on configuring a kiosk, choose the 'Kiosk' option.

Step 4

Assign an appropriate name and provide a description for your policy.

Step 5

Access the 'Kiosk' subtab to explore both types of kiosks available.

Step 6

The options include single-app, multi-app, website kiosk, and digital signage.

Step 7

Each kiosk mode serves a distinct purpose, from dedicated asset use to digital information displays. To start, let's explore the single-app kiosk setup, which locks the Windows device to a single application, perfect for public use, exam terminals, and task-specific stations.

Step 8

Before applying the policy, ensure that you have created a local standard user account and installed the application intended for use. Single-app kiosks are compatible with both UWP/store apps and desktop applications. Enter the kiosk account name to proceed.

Step 9

The kiosk account can be a local Active Directory or Microsoft Entra ID user. Enabling auto logon allows Hexnode to create and automatically sign into the kiosk account after a restart. Click the plus sign to add the desired application.

Step 10

You can add either local applications or those available from public stores. Finally, associate the policy with the target device and save your settings.

Step 11

Upon validation of the policy, the device should boot directly into kiosk mode, displaying only the assigned application in full-screen.

Step 12

Next, let's delve into the multi-app kiosk, designed for controlled access to a selection of applications.

Step 13

The setup is similar to creating a local standard account; ensure that all necessary applications are installed.

Step 14

Navigate to the Windows Kiosk Lockdown configuration settings.

Step 15

Choose between two layout options: auto-generated or custom.

Step 16

An auto-generated layout includes features like automatic launch after login.

Step 17

Alternatively, an auto-generated layout even allows for auto-launch settings post-login.

Step 18

A custom layout enables you to export your own JSON file for configuration.

Step 19

Under advanced settings, determine which files and folders users can access.

Step 20

Select from various options, such as allowing access to files, download folders, removable drives, or the Windows taskbar. The taskbar can provide easier access. When users log in, only apps on the allow list are visible.

Step 21

All other system settings remain hidden. Explore the website kiosk mode, which restricts the device to web-based content, ideal for terminals, learning portals, or feedback systems.

Step 22

Select a browser, such as Kia Browser or Microsoft Edge.

Step 23

Set the homepage and new tab URL, and optionally, configure the navigation buttons.

Step 24

Manage idle timeout settings with reset/home options. Control URL access through allowed and blocked lists, manually or via CSV, and use wildcards for entire domains.

Step 25

Upon new user login, the device will launch in the selected browser, limiting browsing to approved sites. You can also set up to display a specific image, website, or video, perfect for advertising or information displays.

Step 26

The setup for this mode is straightforward.

Step 27

Choose a kiosk account, add content or files, or upload a URL. Enable 'Fit to first screen' and 'Close video' for continuous playback, then save.

Step 28

Further exploration of this mode will be detailed in the digital signage videos.

Step 29

This concludes our overview of the Windows Kiosk Lockdown feature.

Step 30

Transition smoothly from single-purpose kiosks to multi-app setups or website-only terminals.

Step 31

Each mode can be managed through detailed step-by-step setup processes.