在 Windows 10 移动版或 Windows 10 移动企业版上设置展台Set up a kiosk on Windows 10 Mobile or Windows 10 Mobile Enterprise

适用于Applies to

  • Windows 10 移动版Windows 10 Mobile

在无法访问其他设备功能、菜单或设置的情况下,处于展台模式的设备可运行指定应用。A device in kiosk mode runs a specified app with no access to other device functions, menus, or settings. 你可以使用企业分配的访问权限配置服务提供程序 (CSP) 来配置展台体验。You use the Enterprise Assigned Access configuration service provider (CSP) to configure a kiosk experience. 你还可以使用应用园地功能,将运行 Windows 10 移动版或 Windows 10 移动企业版 1607 或更早版本的设备配置为展台模式。You can also configure a device running Windows 10 Mobile or Windows 10 Mobile Enterprise, version 1607 or earlier, for kiosk mode by using the Apps Corner feature. (应用园地在版本 1703 中已删除。)(Apps Corner is removed in version 1703.)

企业分配的访问权限Enterprise Assigned Access

借助企业分配的访问权限,你可以通过创建仅具有单个应用的用户角色,将你的 Windows 10 移动版或 Windows 10 移动企业版设备置于展台模式下,也可以在“允许”列表中将其设置为自动运行。Enterprise Assigned Access allows you to put your Windows 10 Mobile or Windows 10 Mobile Enterprise device in kiosk mode by creating a user role that has only a single app, set to run automatically, in the Allow list.

备注

应用可以是通用 Windows 应用、通用 Windows Phone 8 应用或传统的 Silverlight 应用。The app can be a Universal Windows app, Universal Windows Phone 8 app, or a legacy Silverlight app.

在 MDM 中设置企业分配的访问权限Set up Enterprise Assigned Access in MDM

在 AssignedAccessXml 中,对于应用程序,输入要在网亭模式下运行的应用的产品 ID。In AssignedAccessXml, for Application, you enter the product ID for the app to run in kiosk mode. Windows 10 移动版的产品 ID 中查找产品 ID。Find product IDs at Product IDs in Windows 10 Mobile.

请参阅企业分配的访问权限配置服务提供商 (CSP) 的技术参考。See the technical reference for the Enterprise Assigned Access configuration service provider (CSP).

使用 Windows 配置设计器设置分配的访问权限Set up assigned access using Windows Configuration Designer

重要

生成预配包时,可能会在项目文件和预配包 (.ppkg) 文件中包含敏感信息。When you build a provisioning package, you may include sensitive information in the project files and in the provisioning package (.ppkg) file. 尽管你可以选择加密 .ppkg 文件,但项目文件不会加密。Although you have the option to encrypt the .ppkg file, project files are not encrypted. 应将项目文件存储在安全位置,并在不再需要它们时删除项目文件。You should store the project files in a secure location and delete the project files when they are no longer needed.

创建 AssignedAccess.xml 文件Create the AssignedAccess.xml file

  1. 创建 AssignedAccess.xml 文件以指定设备将运行的应用。Create an AssignedAccess.xml file that specifies the app the device will run. (可以使用任何文件名)有关 AssignedAccessXml 的说明,请参阅 EnterpriseAssignedAccess CSP(You can name use any file name.) For instructions on AssignedAccessXml, see EnterpriseAssignedAccess CSP.

    备注

    请勿在 AssignedAccess.xml 文件中转义 xml,因为 Windows 配置设计器在生成程序包时会执行该操作。Do not escape the xml in AssignedAccess.xml file as Windows Configuration Designer will do that when building the package. 在 Windows ICD 中提供转义的 xml 将导致程序包生成失败。Providing escaped xml in Windows ICD will cause building the package fail.

创建预配包Create the provisioning package

  1. 安装 Windows 配置设计器。Install Windows Configuration Designer.

  2. 打开 Windows 配置设计器(如果是从 Windows ADK %windir%\\Program Files (x86)\\Windows Kits\\10\\Assessment and Deployment Kit\\Imaging and Configuration Designer\\x86\\ICD.exe 安装的)。Open Windows Configuration Designer (if you installed it from the Windows ADK, %windir%\\Program Files (x86)\\Windows Kits\\10\\Assessment and Deployment Kit\\Imaging and Configuration Designer\\x86\\ICD.exe).

  3. 选择高级预配Choose Advanced provisioning.

  4. 为项目命名,然后单击下一步Name your project, and click Next.

  5. 选择所有 Windows 移动版,然后单击下一步Choose All Windows mobile editions and click Next.

  6. 新建项目上,单击完成On New project, click Finish. 此时将打开你的程序包的工作区。The workspace for your package opens.

  7. 依次展开运行时设置 > EmbeddedLockdownProfiles,然后单击 AssignedAccessXmlExpand Runtime settings > EmbeddedLockdownProfiles, and click AssignedAccessXml.

  8. 单击浏览以选择 AssignedAccess.xml 文件。Click Browse to select the AssignedAccess.xml file.

  9. 文件菜单上,选择保存On the File menu, select Save.

  10. 在“导出”**** 菜单上,选择“设置包”****。On the Export menu, select Provisioning package.

  11. 所有者更改为 IT 管理员,这会将此预配包的优先级设置为高于应用于来自其他源的设备的预配包,然后选择下一步Change Owner to IT Admin, which will set the precedence of this provisioning package higher than provisioning packages applied to this device from other sources, and then select Next.

  12. 可选。Optional. 设置程序包安全性窗口中,你可以选择对程序包进行加密并启用程序包签名。In the Provisioning package security window, you can choose to encrypt the package and enable package signing.

    • 启用程序包加密 - 如果你选择此选项,将在屏幕上显示自动生成的密码。Enable package encryption - If you select this option, an auto-generated password will be shown on the screen.

    • 启用程序包签名 - 如果你选择此选项,则必须选择一个有效证书,以用于对程序包进行签名。Enable package signing - If you select this option, you must select a valid certificate to use for signing the package. 你可以通过单击选择并选择要用于对程序包进行签名的证书,指定相关证书。You can specify the certificate by clicking Select and choosing the certificate you want to use to sign the package.

  13. 单击下一步指定你希望设置包在生成后所处的输出位置。Click Next to specify the output location where you want the provisioning package to go when it's built. 默认情况下,Windows ICD 会使用项目文件夹作为输出位置。By default, Windows ICD uses the project folder as the output location.

    或者,你还可以单击浏览更改默认输出位置。Optionally, you can click Browse to change the default output location.

  14. 单击“下一步”****。Click Next.

  15. 单击构建开始构建程序包。Click Build to start building the package. 无需花费太长时间即可构建设置包。The provisioning package doesn't take long to build. 项目信息会显示在构建页面中,并且进度栏会指示构建状态。The project information is displayed in the build page and the progress bar indicates the build status.

    如果你需要取消构建,请单击“取消” ****。If you need to cancel the build, click Cancel. 这将取消当前的构建过程、关闭向导,并使你返回到“自定义页面” ****。This cancels the current build process, closes the wizard, and takes you back to the Customizations Page.

  16. 如果构建失败,则显示一条包含项目文件夹链接的错误消息。If your build fails, an error message will show up that includes a link to the project folder. 你可以扫描日志以确定导致错误的原因。You can scan the logs to determine what caused the error. 解决问题后,请尝试重新构建程序包。Once you fix the issue, try building the package again.

    如果构建成功,将显示设置包的名称、输出目录和项目目录。If your build is successful, the name of the provisioning package, output directory, and project directory will be shown.

    • 如果要进行选择,你可以重新构建设置包并选择不同的输出程序包路径。If you choose, you can build the provisioning package again and pick a different path for the output package. 若要执行此操作,请单击“返回”**** 更改输出程序包名称和路径,然后单击“下一步”**** 启动另一次构建。To do this, click Back to change the output package name and path, and then click Next to start another build.
    • 如果你已完成,请单击“完成”**** 关闭向导,并返回到“自定义页面”****。If you are done, click Finish to close the wizard and go back to the Customizations Page.
  17. 选择输出位置链接以转到该程序包所在的位置。Select the output location link to go to the location of the package.

分发预配包Distribute the provisioning package

你可以使用以下任一方法将该 .ppkg 分发到移动设备:You can distribute that .ppkg to mobile devices using any of the following methods:

  • 可移动媒体 (USB/SD)Removable media (USB/SD)

    从可移动媒体应用设置包To apply a provisioning package from removable media

    1. 将设置包文件复制到微型 SD 卡上的根目录。Copy the provisioning package file to the root directory on a micro SD card.

    2. 在设备上,插入包含预配包的微型 SD 卡。On the device, insert the micro SD card containing the provisioning package.

    3. 转到设置 > 帐户 > 预配Go to Settings > Accounts > Provisioning.

    4. 点击添加程序包Tap Add a package.

    5. 在“选择方法”**** 屏幕上的“添加位置”**** 下拉菜单中,选择“可移动媒体”****。On the Choose a method screen, in the Add from dropdown menu, select Removable Media.

    6. 选择要在微型 SD 卡列出所有可用设置包的程序包。Select a package will list all available provisioning packages on the micro SD card. 点击所需的程序包,然后点击“添加”****。Tap the desired package, and then tap Add.

    7. 你将看到一则消息,告诉你哪些程序包将执行该设备,例如“添加它将:锁定用户界面”****。You will see a message that tells you what the package will do the device, such as Adding it will: Lock down the user interface. 点击“是的,添加它”****。Tap Yes, add it.

    8. 重新启动设备并验证设置包中配置的运行时设置是否已应用到该设备。Restart the device and verify that the runtime settings that were configured in the provisioning package were applied to the device.

  • 电子邮件Email

    应用通过电子邮件发送的设置包To apply a provisioning package sent in email

    1. 将电子邮件中的设置包发送到设备上的帐户。Send the provisioning package in email to an account on the device.

    2. 在设备上打开电子邮件,然后双击附加的文件。Open the email on the device, and then double-tap the attached file.

    3. 你将看到一则消息,告诉你哪些程序包将执行该设备,例如“添加它将:锁定用户界面”****。You will see a message that tells you what the package will do the device, such as Adding it will: Lock down the user interface. 点击“是的,添加它”****。Tap Yes, add it.

    4. 重新启动设备并验证预配包中配置的运行时设置是否已应用到该设备。Restart the device and verify that the runtime settings that were configured in the provisioning package were applied to the device.

  • USB TetherUSB tether

    使用 USB Tether 应用预配包To apply a provisioning package using USB tether

    1. 通过 USB 将设备连接到电脑。Connect the device to your PC by USB.

    2. 选择你想要用于预配设备的设置包,然后将该文件拖放到你的设备中。Select the provisioning package that you want to use to provision the device, and then drag and drop the file to your device.

    3. “设置包安装”对话框将会出现在手机上。The provisioning package installation dialog will appear on the phone.

    4. 你将看到一则消息,告诉你哪些程序包将执行该设备,例如“添加它将:锁定用户界面”****。You will see a message that tells you what the package will do the device, such as Adding it will: Lock down the user interface. 点击“是的,添加它”****。Tap Yes, add it.

    5. 重新启动设备并验证预配包中配置的运行时设置是否已应用到该设备。Restart the device and verify that the runtime settings that were configured in the provisioning package were applied to the device.

应用园地Apps Corner

备注

仅限 Windows 10 版本 1507、1511 和 1607。For Windows 10, versions 1507, 1511, and 1607 only.

应用园地使你可以在自己的 Windows 10 移动版或 Windows 10 移动企业版设备上设置自定义“开始”屏幕,在其中你只能与允许使用你设备的用户共享所选的应用。Apps Corner lets you set up a custom Start screen on your Windows 10 Mobile or Windows 10 Mobile Enterprise device, where you can share only the apps you choose with the people you let use your device. 你可以通过选择要在应用园地中使用的单个应用将设备配置为展台模式。You configure a device for kiosk mode by selecting a single app to use in Apps Corner.

设置应用园地To set up Apps Corner

  1. 在“开始”屏幕 “开始”屏幕 上,轻扫到“应用列表”,然后依次点击设置“设置” > 帐户 > 应用园地On Start start, swipe over to the App list, then tap Settings settings > Accounts > Apps Corner.

  2. 点击应用、点击以选择你希望用户在展台模式下使用的应用,然后点击“完成” done iconTap Apps, tap to select the app that you want people to use in the kiosk mode, and then tap done done icon.

  3. 如果你的手机尚未设置锁屏界面密码,你现在可以设置一个密码以确保他人无法从应用园地访问“开始”屏幕。If your phone doesn't already have a lock screen password, you can set one now to ensure that people can't get to your Start screen from Apps Corner. 点击使用密码保护我的手机、单击添加、在新建 PIN 框中键入 PIN、再次在确认 PIN 框中键入它,然后点击确定Tap Protect my phone with a password, click Add, type a PIN in the New PIN box, type it again in the Confirm PIN box, and then tap OK. 返回 “返回” 以返回到“应用园地”设置。Press Back back to the Apps Corner settings.

  4. “操作中心”**** 的打开或关闭具体取决于你是否希望用户在网亭模式下使用设备时使用这些功能。Turn Action center on or off, depending on whether you want people to be able to use these features when using the device in kiosk mode.

  5. 点击高级,然后根据是否希望用户使用这些功能来打开或关闭它们。Tap advanced, and then turn features on or off, depending on whether you want people to be able to use them.

  6. 完成后,按返回 “返回”Press Back back when you're done.

使用“应用园地”To use Apps Corner

  1. 在“开始”屏幕 “开始”屏幕 上,轻扫到“应用列表”,然后依次点击设置“设置”> 帐户 > 应用园地 >“启动”“启动”On Start start, swipe over to the App list, then tap Settings settings > Accounts > Apps Corner > launch launch.

    提示

    想要通过一次点击访问“应用园地”?Want to get to Apps Corner with one tap? 设置中,依次点击应用园地 > 固定将“应用园地”磁贴固定到“开始”屏幕。In Settings, tap Apps Corner > pin to pin the Apps Corner tile to your Start screen.

  2. 将设备提供给其他人,以便他们可以使用该设备以及仅使用你选中的这个应用。Give the device to someone else, so they can use the device and only the one app you chose.

  3. 当他们完成操作并且你已拿回该设备时,长按“电源”When they're done and you get the device back, press and hold Power 电源,然后向右轻扫以退出“应用园地”。, and then swipe right to exit Apps Corner.

在 Windows 10 专业版、企业版或教育版上设置展台Set up a kiosk on Windows 10 Pro, Enterprise, or Education

使用锁定 XML 配置 Windows 10 移动版Configure Windows 10 Mobile using Lockdown XML

Windows10 移动版中的产品 IDProduct IDs in Windows 10 Mobile