Windows 10 Kiosk with Edge Chromium

Hi Everyone!  In an effort to ensure that everyone is addressed for their individual needs and questions, please start a new discussion for each separate kiosk mode issue.  Thanks! 

-Kelly

ggbnz2230 ,

Thanks! The new Edge is Win32-based and so, Set-AssignedAccess cannot be used to configure it as kiosk app, as that command only works with UWP apps.

To configure Edge as single app kiosk with Assigned Access, you'll have to use WMI Bridge solution: https://docs.microsoft.com/en-us/windows/configuration/kiosk-mdm-bridge. Look for the Powershell samples linked from that page too.

Cc: @edgebrk

Set-AssignedAccess -AUMID Microsoft.MicrosoftEdge.Stable_8wekyb3d8bbwe!MSEDGE -UserName $usrname





Application was not found. Enter either a valid AppName or AUMID
At C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules\AssignedAccess\AssignedAccess.psm1:288 char:17
+ throw $SCStringTable.ErrorAppNotFound
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : OperationStopped: (Application was...ppName or AUMID:String) [], RuntimeException
+ FullyQualifiedErrorId : Application was not found. Enter either a valid AppName or AUMID

ggbnz2230 

I have not tried this option myself, so would relay this back to some experts who may know better. But in the meantime, some dumb questions:

1. I hope you are trying "-AppUserModelId" as in the docs and not "-AUMID" as you mentioned in the post?

2. Are you also supplying the user name/SID via the options mentioned in the docs when using the "Set-AssignedAccess" command line? 

This is the doc I'm referring to in the above: https://docs.microsoft.com/en-us/windows/configuration/kiosk-single-app#powershell

jsundelius 

Glad you were able to figure out the cause! 🙂 Yep, the new Edge has a separate entry and the "old" Edge is now shown as the "Edge Legacy" entry in InTune and this change was recently rolled out in InTune.

Multi-app has supported the new Edge ever since new Edge was released - as multi-app supported Win32 apps too. 

Raj_GS 

I've been trying to run KIOSK through Intune, with W10 20H2, but Edge will not run. It says the application cannot be started.

This is a newly installed computer, and I'm running a "Single app" profile.

Nothing fancy..

I've read about tons of ppl having the same issue with 20H2.

What can I do about it?

February "C" preview release is available for 1909, so I gave it a try. Assigned access works on stable Edge Chromium 88 very well. User can use address bar and multiple tabs, but cannot access settings and addons.  User can only access Downloads folder and this folder gets cleaned after session. This is enough for me.

We are also looking into this maybe being a solution for our kiosk.

Currently we are using a Kiosk Manager application partnered with SCCM to manage/deploy our two kiosks. (HR and Training) 

Some parameters that we want to establish/build off of:

- Machine Auto Sign on (Domain Kiosk Account)

- Auto launch Edge Browser "InPrivate" to a "Landing Page" (page provides web link for users to access, kiosk dependent) 

   - Currently app uses a shell to only allow selected browser to open

- Close/Relaunch browser on idle (kiosk dependent)

- Limits browser functions. (Remove Favorites, access to settings, etc...) 

- Whitelist beyond domain, down to certain paths. 

   Example: we can only WL "domain.com", Goal is to WL "domain.com/Training, domain.com/HR, etc..." depending on kiosk

- Limit users from logging out of kiosk account via CTRL+ATL+DEL, while still allowing local techs access into machine for maintenance. 

- Allow in browser view/print of PDFs (Edge C seems to have an issue handling PDFs currently)

If I have seen Edge Kiosk setting when we started implementing InTune, so I am eager to see if Edge Chromium Kiosk mode will fit our needs.   

I'm trying to use assigned access (user can use only browser and can't escape with ALT+F4).
It is no problem to update up to 20H2, but as you said, necessary changes are not in any stable version yet, so I need to wait. Please notify us when changes will be down-ported.
Also I forgot to mention our devices use Windows 10 in S mode, but that shouldn't be problem, right?

sstk8 thank you for the message and follow up. 

Are you trying to use assigned access or non assigned access scenario? 

Windows 10 1903 Edu will be going out of service on December 8, 2020. What are the plans for moving to a newer version? 

Short answer:

* single-app assigned access is not available on Windows 10 1903 (and won't be available by 1903 end of life)

* single-app non assigned access scenario is ready with Windows 1903 and Microsoft Edge 87

Longer answer: For the assigned access scenario we have a preview with the Windows Insiders version and we are looking to down-port the changes to previous versions of Windows 10 early 2021, on the version that will be in support. We are targeting Windows 10 1909 and up. 

Hello,

I need to deploy single-app kiosk mode with Chromium Edge.

Devices are currently using Windows Education 1903, will Edge 87 work in single-app kiosk mode on latest stable Windows version 20H2 or it is necessary to update to bleeding-edge Windows version?

I really don't want to deploy bleeding-edge dev channel and beta/insider preview channels are still on 20H2.

Thank you.

IMorrison at Ignite we have announced the first set of features are enabled for kiosk mode. https://docs.microsoft.com/en-us/deployedge/microsoft-edge-configure-kiosk-mode#kiosk-mode-features.

You can try them out starting with Microsoft Edge 87.

Would like to understand more about your requirements. Let me know if you want to connect and discuss.  

Hello Adrian_Guta,

I would just like to state that I too would really appreciate if Edge Chromium would be able to run in KIOSK mode.

We have tried Edge legacy for a while and this feature is really solid in my opinion.

Though it appears that we have stumbled upon a small problem which I think Edge Chromium would solve. 

When you download a pdf-file and want to open it in Edge Legacy the session restarts, but in Chromium it seems to automatically open in the browser.

Please keep this project going!

Best Regards,

Simon.A

PatrickK7 thank you for the follow up. We are glad to hear that there is interest on the Kiosk mode feature. 

As my colleague, Brian, mentioned the new Microsoft Edge with single-app Assigned Access requires some Windows updates, so it will take some time before we can land the full scenario. 

We do not have an ETA to share at this moment. 

In the meantime can you please share your use case(s) and if you have any specific requirements to share with us.

As well please let me know if it is ok if I follow offline with you. 

Benjamin Lange thank you for the detailed information. Apologies for the delay in response. 
I have taken note of the experience and requirements you presented. 

Please let me know if it is ok if I follow a conversation offline with you. 

tamarajh 

My company would also be very interested in this feature, has there been any further developments on this?
Our current web app does not work with old Microsoft Edge, and it does work with the new Chromium-based Edge and we would like to use it as part of the assigned access account.

Thanks

tamarajh 

We are using Kiosk devices for several applications:

- Information kiosks

- single Purpose terminals where ahtientication is happening inside web apps

- Multi app Kiosks to Control machines with dedicated apps and web-apps in Kiosk mode.

What's currently missing for us:

- Multi-Tab in Kiosk (Fullscreen)

- Something like "Enforce Fullscreen mode" you had in IE which enabled mutiapp-scenario having just a web app window without controls. I know you have app mode in Chromium, but as soon as a link is opened in a new window, the browser opens in full mode. Users should be permanently locked down to the app/Kiosk mode even with multiple Windows open.

- possibility to have Basic controls linke back, Forward without having to Display the address bar, favourites ...

As some of our devices are procution critical (and all are single Purpose), they are set up with Windows 10 LTSC -> no legacy Edge which covers a lot of the requested Features.

JWade8080 We are right now in the phase of gathering requirements for this.  No ETA as of right now.  Would love to hear more about your use case(s) and if you have any specific requirements to share with us.

Thanks,

-tamara

Brian Altman 

Any update on this? We are hoping to use the new chromium based Edge in Kiosk mode without having to assign enterprise licenses for third party app support and so we can use the same Edge kiosk mode options from the old version. Any ETA would be helpful, we have active projects that are on pause until (new) Edge is working in native kiosk mode. 

Thanks!

ShipUPride FYI, our Microsoft Edge kiosk mode article is now live.