Managing Allowed Websites on Kiosks through Endpoint Manager

%3CLINGO-SUB%20id%3D%22lingo-sub-1551966%22%20slang%3D%22en-US%22%3EManaging%20Allowed%20Websiteson%20Kiosks%20through%20Endpoint%20Manager%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1551966%22%20slang%3D%22en-US%22%3E%3CP%3EI%20have%20kiosks%2C%20both%20Windows%2010%20and%20Android%2C%20that%20I%20only%20want%20a%20select%20few%20websites%20to%20be%20allowed%20as%20these%20will%20be%20outside%20of%20our%20content%20filter.%26nbsp%3B%20This%20can%20be%20done%20with%20with%20an%20App%20Configuration%20for%20managed%20apps%20but%20these%20are%20managed%20devices.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20kiosks%20themselves%20are%20configured%20and%20boot%20to%20the%20page%20I%20want.%3C%2FP%3E%3CP%3EWindows%2010%20is%20done%20via%20Windows%2010%20Kiosk%20Profile.%3C%2FP%3E%3CP%3EThe%20android%20devices%20are%20enrolled%20with%20Android%20Enterprise.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1551966%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMobile%20Device%20Management%20(MDM)%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1552098%22%20slang%3D%22en-US%22%3ERe%3A%20Managing%20Allowed%20Websiteson%20Kiosks%20through%20Endpoint%20Manager%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1552098%22%20slang%3D%22en-US%22%3EHi%20Jason%2C%3CBR%20%2F%3E%3CBR%20%2F%3EAre%20you%20saying%20the%20devices%20are%20managed%20or%20non%20managed%3F%3CBR%20%2F%3E%3CBR%20%2F%3EIf%20managed%20I%20think%20you%20got%20the%20config%20correct%2C%20I%20have%20used%20those%20two%20blogs%20in%20the%20past%20to%20set%20Kiosk%20and%20worked%20as%20expected.%3CBR%20%2F%3E%3CBR%20%2F%3EHope%20this%20helps!%3CBR%20%2F%3EMoe%3CBR%20%2F%3E%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fwww.inthecloud247.com%2Fsetup-a-windows-10-kiosk-device-using-intune-and-autopilot%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fwww.inthecloud247.com%2Fsetup-a-windows-10-kiosk-device-using-intune-and-autopilot%2F%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fwww.inthecloud247.com%2Fhow-to-setup-an-android-enterprise-kiosk-device-with-microsoft-intune%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fwww.inthecloud247.com%2Fhow-to-setup-an-android-enterprise-kiosk-device-with-microsoft-intune%2F%3C%2FA%3E%3CBR%20%2F%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1556873%22%20slang%3D%22en-US%22%3ERe%3A%20Managing%20Allowed%20Websiteson%20Kiosks%20through%20Endpoint%20Manager%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1556873%22%20slang%3D%22en-US%22%3EThanks%2C%20Moe%3CBR%20%2F%3EThese%20are%20device%20managed%20devices.%20Both%20Windows%2010%20and%20Android%20Enterprise%20Tablets%20are%20working%20with%20no%20errors%20on%20the%20configuration.%3CBR%20%2F%3E%3CBR%20%2F%3EWhat%20I%20am%20looking%20for%20is%20a%20way%20to%20restrict%20websites%20in%20a%20similar%20manner%20that%20can%20be%20done%20with%20Edge%20managed%20app.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1557113%22%20slang%3D%22en-US%22%3ERe%3A%20Managing%20Allowed%20Websiteson%20Kiosks%20through%20Endpoint%20Manager%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1557113%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F89556%22%20target%3D%22_blank%22%3E%40Jason%20Maclauchlan%3C%2FA%3E%26nbsp%3B%20For%20Android%2C%20you%20can%20create%2Fassign%20an%20app%20configuration%20policy%20for%20managed%20Google%20Chrome%20to%20achieve%20this.%20You%20can%20use%20either%20the%20configuration%20designer%20or%20JSON%20editor%20to%20whitelist%20the%20allowed%20urls.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1558638%22%20slang%3D%22en-US%22%3ERe%3A%20Managing%20Allowed%20Websiteson%20Kiosks%20through%20Endpoint%20Manager%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1558638%22%20slang%3D%22en-US%22%3EHi%20Jason%2C%3CBR%20%2F%3E%3CBR%20%2F%3EI%20think%20you%20can%20achieve%20this%20on%20Windows%2010%20using%20App%20Protection%20Policy.%20But%20I%20don%E2%80%99t%20think%20you%20can%20achieve%20it%20on%20Android.%3CBR%20%2F%3E%3CBR%20%2F%3EMoe%3CBR%20%2F%3E%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fmicrosoftintune.uservoice.com%2Fforums%2F291681-ideas%2Fsuggestions%2F36102016-allow-app-configuration-policies-for-device-enroll%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fmicrosoftintune.uservoice.com%2Fforums%2F291681-ideas%2Fsuggestions%2F36102016-allow-app-configuration-policies-for-device-enroll%3C%2FA%3E%3CBR%20%2F%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1558640%22%20slang%3D%22en-US%22%3ERe%3A%20Managing%20Allowed%20Websiteson%20Kiosks%20through%20Endpoint%20Manager%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1558640%22%20slang%3D%22en-US%22%3EHi%20Jason%2C%3CBR%20%2F%3E%3CBR%20%2F%3EYou%20can%20achieve%20this%20on%20Windows%2010%20using%20App%20Protection%20Policy.%20But%20I%20don%E2%80%99t%20think%20you%20can%20achieve%20it%20on%20Android.%3CBR%20%2F%3E%3CBR%20%2F%3EMoe%3CBR%20%2F%3E%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fmicrosoftintune.uservoice.com%2Fforums%2F291681-ideas%2Fsuggestions%2F36102016-allow-app-configuration-policies-for-device-enroll%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fmicrosoftintune.uservoice.com%2Fforums%2F291681-ideas%2Fsuggestions%2F36102016-allow-app-configuration-policies-for-device-enroll%3C%2FA%3E%3CBR%20%2F%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1558781%22%20slang%3D%22en-US%22%3ERe%3A%20Managing%20Allowed%20Websites%20on%20Kiosks%20through%20Endpoint%20Manager%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1558781%22%20slang%3D%22en-US%22%3EIf%20you're%20using%20Edge%20Chromium%20on%20Windows%2010%2C%20it%20can%20be%20done%20with%20an%20Administrative%20Templates%20profile%2C%20using%20block%20and%20allow%20list.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1559250%22%20slang%3D%22en-US%22%3ERe%3A%20Managing%20Allowed%20Websites%20on%20Kiosks%20through%20Endpoint%20Manager%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1559250%22%20slang%3D%22en-US%22%3EWindows%2010%20Kiosk%20mode%20does%20not%20work%20with%20Edge%20Chromium.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1560142%22%20slang%3D%22en-US%22%3ERe%3A%20Managing%20Allowed%20Websites%20on%20Kiosks%20through%20Endpoint%20Manager%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1560142%22%20slang%3D%22en-US%22%3EGive%20it%20a%20try%20%3CA%20href%3D%22https%3A%2F%2Fwww.inthecloud247.com%2Fsetup-edge-chromium-based-kiosk-device-with-microsoft-intune%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fwww.inthecloud247.com%2Fsetup-edge-chromium-based-kiosk-device-with-microsoft-intune%2F%3C%2FA%3E%3C%2FLINGO-BODY%3E
Contributor

I have kiosks, both Windows 10 and Android, that I only want a select few websites to be allowed as these will be outside of our content filter.  This can be done with with an App Configuration for managed apps but these are managed devices.

 

The kiosks themselves are configured and boot to the page I want.

Windows 10 is done via Windows 10 Kiosk Profile.

The android devices are enrolled with Android Enterprise.

 

 

7 Replies
Hi Jason,

Are you saying the devices are managed or non managed?

If managed I think you got the config correct, I have used those two blogs in the past to set Kiosk and worked as expected.

Hope this helps!
Moe

https://www.inthecloud247.com/setup-a-windows-10-kiosk-device-using-intune-and-autopilot/

https://www.inthecloud247.com/how-to-setup-an-android-enterprise-kiosk-device-with-microsoft-intune/
Thanks, Moe
These are device managed devices. Both Windows 10 and Android Enterprise Tablets are working with no errors on the configuration.

What I am looking for is a way to restrict websites in a similar manner that can be done with Edge managed app.

@Jason Maclauchlan  For Android, you can create/assign an app configuration policy for managed Google Chrome to achieve this. You can use either the configuration designer or JSON editor to whitelist the allowed urls.

Hi Jason,

You can achieve this on Windows 10 using App Protection Policy. But I don’t think you can achieve it on Android.

Moe

https://microsoftintune.uservoice.com/forums/291681-ideas/suggestions/36102016-allow-app-configurati...
If you're using Edge Chromium on Windows 10, it can be done with an Administrative Templates profile, using block and allow list.
Windows 10 Kiosk mode does not work with Edge Chromium.