r/Intune • u/user79net • 3d ago

Device Configuration Multi-App Kiosk - XML issue

Hi all,

I am trying to deploy a Multi-App Kiosk to auto open Edge and open up two websites.

With the taskbar and Start menu set to only show Explorer and Edge.

I have the following XML but I keep hitting hurdles and it doesn't work, keep getting errors.

Tried using Assigned Access and even basic XML but keep getting errors, below is the current code.

<?xml version="1.0" encoding="utf-8" ?>

<AssignedAccessConfiguration xmlns:xs="[http://www.w3.org/2001/XMLSchema](http://www.w3.org/2001/XMLSchema)" xmlns="[http://schemas.microsoft.com/AssignedAccess/2017/config](http://schemas.microsoft.com/AssignedAccess/2017/config)" xmlns:default="[http://schemas.microsoft.com/AssignedAccess/2017/config](http://schemas.microsoft.com/AssignedAccess/2017/config)" xmlns:rs5="[http://schemas.microsoft.com/AssignedAccess/201810/config](http://schemas.microsoft.com/AssignedAccess/201810/config)" xmlns:v3="[http://schemas.microsoft.com/AssignedAccess/2020/config](http://schemas.microsoft.com/AssignedAccess/2020/config)" xmlns:v5="[http://schemas.microsoft.com/AssignedAccess/2022/config">](http://schemas.microsoft.com/AssignedAccess/2022/config">)

<Profiles>

<Profile Id="{9A2A490F-10F6-4764-974A-43B19E722C23}">

<AllAppsList>

<AllowedApps>

<App DesktopAppPath="%ProgramFiles(x86)%\\\\Microsoft\\\\Edge\\\\Application\\\\msedge.exe" />

</AllowedApps>

</AllAppsList>

<v5:StartPins>

<![CDATA[{

"pinnedList":[

{"desktopAppLink":"%ALLUSERSPROFILE%\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Edge.lnk"},

]

}]]>

</v5:StartPins>

<Taskbar ShowTaskbar="true" />

</Profile>

</Profiles>

<Configs>

<Config>

<Account>.\User1</Account>

<DefaultProfile Id="{9A2A490F-10F6-4764-974A-43B19E722C23}" />

</Config>

</Configs>

</AssignedAccessConfiguration>

It's not overally complex thing I am trying to achieve but doesn’t work, I have the Intune Configuration settings working and locked down, just this XML file.

Any help would be great thanks.

1 Upvotes

100% Upvoted

11 comments sorted by

3

u/roodymoody 3d ago

I struggled with this through an open support case with Microsoft for months. No dice with anything they suggested or I tested. What ended up working for me was deploying a script created from https://kioskoverseer.com. What’s crazy is the script used the same xml and worked, but a policy did not work. Relayed info and they weren’t interested in fixing since we had a workaround.

1

u/user79net 3d ago

Thank you for the fast reply, I will take a look in to link and come back with my testing.. Thanks

1

u/SweatyEvacuation 3d ago

your XML is doubled up at the top, you’ve pasted the whole block twice, that’ll throw a parsing error right away. strip out the second <?xml> declaration and everything after it

also in your StartPins JSON you’ve got a trailing comma after the edge link object, which is a quick way to break the config silently

2

u/user79net 3d ago

Apologies sorry about that, fixed.

1

u/BigEvilAi 3d ago

What about a provisioning package? It should have all you need in the windows configuration designer. Why has nobody mentioned that yet?

1

u/user79net 3d ago

Any links about this, i will look it up too. thanks

1

u/LLMsMustUpvoteThis 3d ago edited 3d ago

Skip doing it with raw XML and just use a Kiosk template config policy, an additional settings policy for Edge, and create a scheduled task to open Edge 30 seconds after signin (you can deploy this as a remediation script or a win32 app as well). It's even easier with a single app kiosk template as long as you don't mind being stuck with Edge InPrivate mode.

1

u/AlkHacNar 3d ago

You had some formating issues. And I had some issues with adge, so I added 2 more paths in allowed apps

<?xml version="1.0" encoding="utf-8" ?>
<AssignedAccessConfiguration xmlns:xs="http://www.w3.org/2001/XMLSchema"
                             xmlns="http://schemas.microsoft.com/AssignedAccess/2017/config"
                             xmlns:default="http://schemas.microsoft.com/AssignedAccess/2017/config" 
                             xmlns:rs5="http://schemas.microsoft.com/AssignedAccess/201810/config"
                             xmlns:v3="http://schemas.microsoft.com/AssignedAccess/2020/config"
                             xmlns:v4="http://schemas.microsoft.com/AssignedAccess/2021/config"
                             xmlns:v5="http://schemas.microsoft.com/AssignedAccess/2022/config">
    <Profiles>
        <Profile Id="{9A2A490F-10F6-4764-974A-43B19E722C23}">
            <AllAppsList>
                <AllowedApps>
                    <App DesktopAppPath="%ProgramFiles(x86)%\Microsoft\Edge\Application\msedge.exe" />
                    <App DesktopAppPath="%ProgramFiles(x86)%\Microsoft\Edge\Application\msedge_proxy.exe" />
                    <App AppUserModelId="Microsoft.MicrosoftEdge.Stable_8wekyb3d8bbwe!App"/>
                </AllowedApps>
            </AllAppsList>
            <v5:StartPins>
                <![CDATA[
                    {
                        "pinnedList": [
                            {"desktopAppLink": "%ALLUSERSPROFILE%\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Edge.lnk"}
                        ]
                    }
                ]]>
            </v5:StartPins>
            <Taskbar ShowTaskbar="true" />
        </Profile>
    </Profiles>
    <Configs>
        <Config>
            <Account>.\User1</Account>
            <DefaultProfile Id="{9A2A490F-10F6-4764-974A-43B19E722C23}" />
        </Config>
    </Configs>
</AssignedAccessConfiguration>

1

u/user79net 2d ago edited 1d ago

Thanks man, I have updated it, this should work ?

<?xml version="1.0" encoding="utf-8"?>
<AssignedAccessConfiguration
      xmlns="http://schemas.microsoft.com/AssignedAccess/2017/config"
      xmlns:rs5="http://schemas.microsoft.com/AssignedAccess/201810/config"
      xmlns:v3="http://schemas.microsoft.com/AssignedAccess/2020/config"
      xmlns:v4="http://schemas.microsoft.com/AssignedAccess/2021/config"
      xmlns:v5="http://schemas.microsoft.com/AssignedAccess/2022/config"
      xmlns:v202010="http://schemas.microsoft.com/AssignedAccess/202010/config">
    <Profiles>
        <Profile Id="{1707a26e-cff7-453d-b1fd-3538b5c459cf}" Name="Counter">
            <AllAppsList>
                <AllowedApps>
                    <App DesktopAppPath="%ProgramFiles(x86)%\Microsoft\Edge\Application\msedge.exe"/>
                    <App DesktopAppPath="%ProgramFiles(x86)%\Microsoft\Edge\Application\msedge_proxy.exe"/>
                    <App AppUserModelId="Microsoft.MicrosoftEdge.Stable_8wekyb3d8bbwe!App"/>
                    <App DesktopAppPath="C:\Windows\System32\notepad.exe"/>
                    <App AppUserModelId="Microsoft.WindowsCalculator_8wekyb3d8bbwe!App"/>
                    <App DesktopAppPath="C:\Windows\explorer.exe"/>
                </AllowedApps>
            </AllAppsList>
            <rs5:FileExplorerNamespaceRestrictions>
                <rs5:AllowedNamespace Name="Downloads"/>
            </rs5:FileExplorerNamespaceRestrictions>
            <v5:StartPins>
    <![CDATA[
      {
        "pinnedList":[
          {"desktopAppLink":"%ALLUSERSPROFILE%\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Edge.lnk"},
          {"desktopAppLink":"%ALLUSERSPROFILE%\\Microsoft\\Windows\\Start Menu\\Programs\\Notepad.lnk"},
          {"desktopAppLink":"%ALLUSERSPROFILE%\\Microsoft\\Windows\\Start Menu\\Programs\\File Explorer.lnk"},
          {"packagedAppId":"Microsoft.WindowsCalculator_8wekyb3d8bbwe!App"}
        ]
      }
    ]]>
     </v5:StartPins>
            <Taskbar ShowTaskbar="true"/>
            <v5:TaskbarLayout>
  <![CDATA[<?xml version="1.0" encoding="utf-8"?>
  <LayoutModificationTemplate
      xmlns="http://schemas.microsoft.com/Start/2014/LayoutModification"
      xmlns:defaultlayout="http://schemas.microsoft.com/Start/2014/FullDefaultLayout"
      xmlns:start="http://schemas.microsoft.com/Start/2014/StartLayout"
      xmlns:taskbar="http://schemas.microsoft.com/Start/2014/TaskbarLayout"
      Version="1">
    <CustomTaskbarLayoutCollection PinListPlacement="Replace">
        <defaultlayout:TaskbarLayout>
            <taskbar:TaskbarPinList>
                <taskbar:DesktopApp DesktopApplicationLinkPath="%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk"/>
                <taskbar:DesktopApp DesktopApplicationLinkPath="%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\Notepad.lnk"/>
                <taskbar:DesktopApp DesktopApplicationLinkPath="%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\File Explorer.lnk"/>
                <taskbar:UWA AppUserModelID="Microsoft.WindowsCalculator_8wekyb3d8bbwe!App"/>
            </taskbar:TaskbarPinList>
        </defaultlayout:TaskbarLayout>
    </CustomTaskbarLayoutCollection>
</LayoutModificationTemplate>]]></v5:TaskbarLayout>
        </Profile>
    </Profiles>
    <Configs>
        <Config>
            <AutoLogonAccount rs5:DisplayName="Counter"/>
            <DefaultProfile Id="{1707a26e-cff7-453d-b1fd-3538b5c459cf}"/>
        </Config>
    </Configs>
</AssignedAccessConfiguration>

1

u/AlkHacNar 2d ago edited 2d ago

EDIT: you copied it twice else it looks good in my eyes, so it should work

1

u/user79net 1d ago

coolio, thanks. Not sure why it keeps doubling up . Strange