Windows 10 and Windows Holographic for Business device settings to run as a dedicated kiosk using Intune

On Windows 10 devices, use Intune to run devices as a kiosk, sometimes known as a dedicated device. A device in kiosk mode can run one app, or run many apps. You can show and customize a start menu, add different apps, including Win32 apps, add a specific home page to a web browser, and more.

This feature applies to:

  • Windows 10 and later
  • Windows Holographic for Business

To create kiosk profiles for other platforms, see Android device administrator, Android Enterprise, and iOS/iPadOS.

Intune supports one kiosk profile per device. If you need multiple kiosk profiles on a single device, you can use a Custom OMA-URI.

Intune uses "configuration profiles" to create and customize these settings for your organization's needs. After you add these features in a profile, push or deploy these settings to groups in your organization.

This article shows you how to create a device configuration profile. For a list of all the settings, and what they do, see Windows 10 kiosk settings and Windows Holographic for Business kiosk settings.

Create the profile

  1. Sign in to the Microsoft Endpoint Manager admin center.

  2. Select Devices > Configuration profiles > Create profile.

  3. Enter the following properties:

    • Platform: Select Windows 10 and later.
    • Profile: Select Kiosk.
  4. Select Create.

  5. In Basics, enter the following properties:

    • Name: Enter a descriptive name for the new profile.
    • Description: Enter a description for the profile. This setting is optional, but recommended.
  6. Select Next.

  7. In Configuration settings > Select a kiosk mode, choose the type of kiosk mode supported by the policy. Options include:

    • Not Configured (default): Intune doesn't change or update this setting. The policy doesn't enable kiosk mode.

    • Single app, full-screen kiosk: The device runs as a single user account, and locks it to a single Store app. So when the user signs in, a specific app starts. This mode also restricts the user from opening new apps, or changing the running app.

    • Multi app kiosk: The device runs multiple Store apps, Win32 apps, or inbox Windows apps by using the Application User Model ID (AUMID). Only the apps you add are available on the device.

      The benefit of a multi-app kiosk, or fixed-purpose device, is to provide an easy-to-understand experience for users by only accessing apps they need. And, also removing from their view the apps they don't need.

    For a list of all settings, and what they do, see:

  8. Select Next.

  9. In Scope tags (optional), assign a tag to filter the profile to specific IT groups, such as US-NC IT Team or JohnGlenn_ITDepartment. For more information about scope tags, see Use RBAC and scope tags for distributed IT.

    Select Next.

  10. In Assignments, select the users or user group that will receive your profile. For more information on assigning profiles, see Assign user and device profiles.

    Select Next.

  11. In Review + create, review your settings. When you select Create, your changes are saved, and the profile is assigned. The policy is also shown in the profiles list.

The next time each device checks in, the policy is applied.

Next steps

After the profile is assigned, monitor its status.

You can create kiosk profiles for devices that run the following platforms: