Forum Discussion

ABill1's avatar
ABill1
Iron Contributor
Dec 05, 2023

Kiosk mode set up - azure ad log in - multi app

Hello everyone,

 

I'm struggling to enable kiosk mode and need some help. What I'm aiming for is to have users have access to only Edge, Office apps (including OneNote), Settings, and Python.

Users will use Azure AD for device login, as they are managed through Intune.

I attempted to follow the instructions at https://petervanderwoude.nl/post/configuring-multi-app-kiosk-mode-on-windows-11/comment-page-1/?unapproved=204857&moderation-hash=a99abbd45d2f235ba0740ff4afd06552#comment-204857 but encountered difficulties getting it to work.

When applying the policy I created, I encountered an error: -2016281112.

Any suggestions or ideas on how to resolve this issue would be greatly appreciated.

Azure Friday
Conditional Access
Graph API
Mobile Application Management (MAM)
mobile device management (mdm)
Software Management

2 Replies

Sort By
  • LeonPavesic's avatar
    LeonPavesic
    Silver Contributor
    Dec 06, 2023

    Hi ABill1,

    The error code -2016281112 encountered during the setup of a multi-app kiosk mode with Azure AD login may be connected to users being targeted by conditional access policies needing user interaction, such as Multi-Factor Authentication (MFA) or maybe even Terms of Use (TOU).

    To troubleshoot (resolve) this issue, cyou can follow these steps:

    1. Exclude kiosk users from any conditional access policies mandating user interaction, such as MFA or TOU.
    2. If the kiosk user has MFA enabled, disable it, as MFA is currently not supported in multi-app kiosk mode scenarios.

    Users can't log on to Windows 10 computers with multi-app kiosk profile assigned - Intune | Microsoft Learn

    Windows 11 kiosk with multiple Azure AD users - Microsoft Q&A


    Please click Mark as Best Response & Like if my post helped you to solve your issue.
    This will help others to find the correct solution easily. It also closes the item.


    If the post was useful in other ways, please consider giving it Like.


    Kindest regards,


    Leon Pavesic
    (LinkedIn)

    • ABill1's avatar
      ABill1
      Iron Contributor
      Dec 06, 2023

      HiLeonPavesic 

      So I dont use MFA however I have gone the device config way which has worked better however I have encountered some errors

       

      Current set up 

       

       

       This works but I need to set up pinned apps to be the ones I have added. Also some more which I am yet to add like onenote and powerpoint. 

       

      What would the Start layout be to get this done? 

       

       

Resources