Home

Kiosk Mode not logging in - "kioskUser0 the user name or password is incorrect"

%3CLINGO-SUB%20id%3D%22lingo-sub-377762%22%20slang%3D%22en-US%22%3EKiosk%20Mode%20not%20logging%20in%20-%20%22kioskUser0%20the%20user%20name%20or%20password%20is%20incorrect%22%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-377762%22%20slang%3D%22en-US%22%3E%3CP%3EI%20am%20working%20with%20creating%20a%20Device%20Configuration%20Profile%20for%20Kiosk%20Mode.%20The%20device%20is%20Windows%2010%201809%20and%20is%20Azure%20AD%20joined%20only%20and%20is%20syncing%20and%20receiving%20policies%2C%20updates%2C%20and%20software.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWhen%20the%20device%20is%20restarted%20the%20Kiosk%20policy%20attempts%20to%20force%20the%20Auto-login%20option%20but%20fails.%20It%20is%20showing%20User%20%22kioskUser0%22%20and%20giving%20the%20generic%20message%20of%20%22username%2Fpassword%20is%20incorrect%22.%20I%20wait%20a%20minute%20or%202%20and%20the%20timeout%20for%20attempting%20the%20login%20with%20the%20kiosk%20user%20occurs%2C%20then%20I%20am%20able%20to%20then%20login%20with%20any%20azure%20ad%20user%20I%20attempt.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWhen%20the%20policy%20is%20applied%20is%20it%20creating%20kioskUser0%20as%20a%20local%20account%20on%20the%20device%3F%3C%2FP%3E%3CP%3EOther%20than%20restarting%2C%20is%20there%20any%20way%20for%20the%20device%20to%20attempt%20to%20log%20back%20into%20the%20kiosk%20section%3F%20(logging%20in%20and%20signing%20out%20does%20not%20seem%20to%20trigger%20this)%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-377762%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Ekiosk%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-393853%22%20slang%3D%22en-US%22%3ERe%3A%20Kiosk%20Mode%20not%20logging%20in%20-%20%22kioskUser0%20the%20user%20name%20or%20password%20is%20incorrect%22%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-393853%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F304609%22%20target%3D%22_blank%22%3E%40cbelcher%3C%2FA%3E%2C%3C%2FP%3E%0A%3CP%3Ehmm%20okay%20understand.%20I%20didn't%20setup%20kiosk%20with%20USB%20sticks%20and%20provisioning%20packages%20until%20now.%20Anyway%20after%20restart%20the%20auto%20logon%20should%20work.%20Did%20you%20try%20to%20specify%20.%5CkioskUser0%20and%20leave%20the%20pasword%20blank%3F%20important%20is%20the%20.%5C%20in%20front%20to%20make%20sure%20the%20logon%20window%20knows%20it%20is%20a%20local%20user%20logon.%20Do%20you%20have%20other%20MDM%20policies%20which%20getting%20applied%20to%20the%20device%20as%20well%3F%20maybe%20they%20create%20a%20kind%20of%20conflict.%20e.g.%20if%20you%20enforce%20via%20Compliance%20policy%20require%20passwort%20it%20will%20break%20auto%20logon.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3Ebest%2C%3C%2FP%3E%0A%3CP%3EOliver%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-391855%22%20slang%3D%22en-US%22%3ERe%3A%20Kiosk%20Mode%20not%20logging%20in%20-%20%22kioskUser0%20the%20user%20name%20or%20password%20is%20incorrect%22%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-391855%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F174439%22%20target%3D%22_blank%22%3E%40Oliver%20Kieselbach%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3ETo%20clarify%2C%26nbsp%3B%20I%20am%20not%20using%20Auto-pilot%20with%20ESP.%20This%20are%20provisioned%20with%20a%20USB%20and%20the%20the%20kiosk%20mode%20profile%20is%20applied%20when%20the%20device%20is%20synced.%20Is%20the%20issue%20you%20stated%20still%20going%20to%20affect%20me%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-387851%22%20slang%3D%22en-US%22%3ERe%3A%20Kiosk%20Mode%20not%20logging%20in%20-%20%22kioskUser0%20the%20user%20name%20or%20password%20is%20incorrect%22%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-387851%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F304609%22%20target%3D%22_blank%22%3E%40cbelcher%3C%2FA%3E%2C%3C%2FP%3E%0A%3CP%3Ethe%20policy%20is%20creating%20the%20kioskuser0%20and%20confgures%20the%20autologon.%20If%20you%20combine%20this%20with%20a%20Autopilot%20Self%20Deploying%20Mode%20(SDM)%20Profile%20then%20the%20OOBE%20will%20enable%20the%20Enrollment%20Status%20Page%20(ESP)%20and%20waits%20for%20the%20receiving%20of%20this%20policy%20and%20then%20when%20it%20proceeds%20the%20kioskuser0%20autologon%20will%20instantly%20take%20you%20to%20the%20Kiosk.%20In%20my%20tests%20I%20found%20a%20problem%20in%20this%20mode%20as%20the%20ESP%20is%20currently%20not%20correctly%20waiting%20for%20the%20kiosk%20profile%20therefore%20the%20autologon%20is%20not%20working.%20This%20is%20currently%20known%20by%20Microsoft%20and%20they%20are%20working%20on%20a%20fix.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3Ebest%2C%3C%2FP%3E%0A%3CP%3EOliver%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-433000%22%20slang%3D%22en-US%22%3ERe%3A%20Kiosk%20Mode%20not%20logging%20in%20-%20%22kioskUser0%20the%20user%20name%20or%20password%20is%20incorrect%22%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-433000%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F174439%22%20target%3D%22_blank%22%3E%40Oliver%20Kieselbach%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20am%20working%20with%20Premiere%20support%20at%20the%20moment%20to%20dig%20in%20and%20figure%20this%20out.%20I%20will%20reply%20back%20with%20my%20notes%20for%20others%20to%20benefit%20from%20as%20well.%20This%20reply%20is%20to%20let%20everyone%20know%20this%20is%20still%20being%20investigated.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-457223%22%20slang%3D%22en-US%22%3ERe%3A%20Kiosk%20Mode%20not%20logging%20in%20-%20%22kioskUser0%20the%20user%20name%20or%20password%20is%20incorrect%22%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-457223%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F304609%22%20target%3D%22_blank%22%3E%40cbelcher%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F174439%22%20target%3D%22_blank%22%20rel%3D%22noopener%22%3E%40Oliver%20Kieselbach%3C%2FA%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EBelow%20are%20the%20results%20of%20what%20I%20found%20with%20MS%20Support%20to%20be%20the%20steps%20taken%20to%20achieve%20Kiosk%20Mode.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3COL%3E%3CLI%3EDevices%20must%20enrolled%20to%20MS%20Intune.%20I%20did%20this%20with%20Set%20up%20my%20School%20PC's%20app%3C%2FLI%3E%3CUL%3E%3CLI%3EUsing%20open%20Wireless%20SSID%20(our%20MAC%20addresses%20were%20added%20CISCO%20ISE%20to%20allow%20them%20directly%20on%20to%20the%20network%20without%20the%20need%20to%20click%20our%20Acceptable%20Use%20Policy)%3C%2FLI%3E%3C%2FUL%3E%3CLI%3ECreated%20a%20Dynamic%20Group%20to%20for%20the%20enrolled%20devices%20(Using%20Assigned%20will%20also%20work)%3C%2FLI%3E%3CLI%3EDevices%20were%20updated%20from%20Windows%2010%201803%20to%201809%20using%20the%20Software%20Update%20Ring%20policy%3C%2FLI%3E%3CLI%3ECreated%20a%20device%20configuration%20policy%20to%20%E2%80%9CEnable%20share%20usage%20data%E2%80%9D%20to%20Basic%3C%2FLI%3E%3CLI%3EObtained%20the%20Online%20and%20Offline%20version%20of%20the%20Kiosk%20Browser%20app%20from%20the%20MS%20Store%20for%20Education%3C%2FLI%3E%3C%2FOL%3E%3CUL%3E%3CUL%3E%3CLI%3E***Unable%20to%20tell%20the%20difference%20in%20the%20apps%20from%20the%20console%20UI%20once%20synced***%3C%2FLI%3E%3CUL%3E%3CLI%3EAssigned%20the%20app%20to%20the%20device%20group%3C%2FLI%3E%3CLI%3E***The%20first%20app%20in%20the%20list%20was%20chosen%2C%20which%20in%20further%20investigation%20is%20the%20online%20app.%3CBR%20%2F%3E%3CBR%20%2F%3E6.Setup%20a%20Device%20Configuration%20policy%20for%20a%20Kiosk%20profile%3C%2FLI%3E%3C%2FUL%3E%3C%2FUL%3E%3C%2FUL%3E%3CUL%3E%3CLI%3ENamed%20%22Kiosk%20Profile%20for%20Library%20Catalog%22%3C%2FLI%3E%3CLI%3ESingle%20App%20%3D%20Kiosk%20Browser%3C%2FLI%3E%3CLI%3ESet%20up%20for%20Auto%20logon%2C%20Windows%201803%2B%3C%2FLI%3E%3CLI%3EURL%20(for%20now)%20bing.com%3C%2FLI%3E%3CLI%3EIn%20further%20testing%2C%20I%20found%20the%20Kiosk%20Browser%20app%20does%20support%20intranet%20sites%3C%2FLI%3E%3CLI%3EAssigned%20to%20the%20device%20group%20from%20Step%202%3C%2FLI%3E%3C%2FUL%3E%3CP%3E%26nbsp%3B%26nbsp%3B%3C%2FP%3E%3CP%3ENotes%20for%20the%20experience%3A%3C%2FP%3E%3CP%3EI%20found%20I%20had%20to%20restart%20the%20devices%20several%20times%20after%20everything%20was%20in%20place%20before%20it%20would%20actually%20take%20place.%20(Approx%203-4%20times%20per%20device)%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EDuring%20some%20further%20testing%20I%20found%3A%3C%2FP%3E%3CP%3EIn%20a%20Device%20Restriction%20policy%2C%20password%20section%2C%20filling%20in%20the%20preferred%20tenant%20name%20breaks%20the%20auto%20login%20feature%20for%20kiosk%20mode.%20I%20made%20a%20single%20change%20and%20once%20the%20devices%20synced%2C%20and%20restarted%2C%20they%20were%20unable%20to%20auto-login.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThank%20you%20Oliver%20for%20reaching%20out%20to%20help%20me.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
cbelcher
New Contributor

I am working with creating a Device Configuration Profile for Kiosk Mode. The device is Windows 10 1809 and is Azure AD joined only and is syncing and receiving policies, updates, and software.

 

When the device is restarted the Kiosk policy attempts to force the Auto-login option but fails. It is showing User "kioskUser0" and giving the generic message of "username/password is incorrect". I wait a minute or 2 and the timeout for attempting the login with the kiosk user occurs, then I am able to then login with any azure ad user I attempt.

 

When the policy is applied is it creating kioskUser0 as a local account on the device?

Other than restarting, is there any way for the device to attempt to log back into the kiosk section? (logging in and signing out does not seem to trigger this)

 

5 Replies

Hi @cbelcher,

the policy is creating the kioskuser0 and confgures the autologon. If you combine this with a Autopilot Self Deploying Mode (SDM) Profile then the OOBE will enable the Enrollment Status Page (ESP) and waits for the receiving of this policy and then when it proceeds the kioskuser0 autologon will instantly take you to the Kiosk. In my tests I found a problem in this mode as the ESP is currently not correctly waiting for the kiosk profile therefore the autologon is not working. This is currently known by Microsoft and they are working on a fix.

 

best,

Oliver

@Oliver Kieselbach 

To clarify,  I am not using Auto-pilot with ESP. This are provisioned with a USB and the the kiosk mode profile is applied when the device is synced. Is the issue you stated still going to affect me?

Hi @cbelcher,

hmm okay understand. I didn't setup kiosk with USB sticks and provisioning packages until now. Anyway after restart the auto logon should work. Did you try to specify .\kioskUser0 and leave the pasword blank? important is the .\ in front to make sure the logon window knows it is a local user logon. Do you have other MDM policies which getting applied to the device as well? maybe they create a kind of conflict. e.g. if you enforce via Compliance policy require passwort it will break auto logon.

 

best,

Oliver

@Oliver Kieselbach 

I am working with Premiere support at the moment to dig in and figure this out. I will reply back with my notes for others to benefit from as well. This reply is to let everyone know this is still being investigated.

@cbelcher 

@Oliver Kieselbach 

 

Below are the results of what I found with MS Support to be the steps taken to achieve Kiosk Mode.

 

  1. Devices must enrolled to MS Intune. I did this with Set up my School PC's app
    • Using open Wireless SSID (our MAC addresses were added CISCO ISE to allow them directly on to the network without the need to click our Acceptable Use Policy)
  2. Created a Dynamic Group to for the enrolled devices (Using Assigned will also work)
  3. Devices were updated from Windows 10 1803 to 1809 using the Software Update Ring policy
  4. Created a device configuration policy to “Enable share usage data” to Basic
  5. Obtained the Online and Offline version of the Kiosk Browser app from the MS Store for Education
    • ***Unable to tell the difference in the apps from the console UI once synced***
      • Assigned the app to the device group
      • ***The first app in the list was chosen, which in further investigation is the online app.

        6.Setup a Device Configuration policy for a Kiosk profile
  • Named "Kiosk Profile for Library Catalog"
  • Single App = Kiosk Browser
  • Set up for Auto logon, Windows 1803+
  • URL (for now) bing.com
  • In further testing, I found the Kiosk Browser app does support intranet sites
  • Assigned to the device group from Step 2

  

Notes for the experience:

I found I had to restart the devices several times after everything was in place before it would actually take place. (Approx 3-4 times per device)

 

During some further testing I found:

In a Device Restriction policy, password section, filling in the preferred tenant name breaks the auto login feature for kiosk mode. I made a single change and once the devices synced, and restarted, they were unable to auto-login.

 

Thank you Oliver for reaching out to help me.

 

Related Conversations
Tabs and Dark Mode
cjc2112 in Discussions on
35 Replies
Extentions Synchronization
ChirmyRam in Discussions on
3 Replies
Stable version of Edge insider browser
HotCakeX in Discussions on
35 Replies
How to Prevent Teams from Auto-Launch
chenrylee in Microsoft Teams on
29 Replies
flashing a white screen while open new tab
Deleted in Discussions on
14 Replies