Questions on Intune - Autopilot

%3CLINGO-SUB%20id%3D%22lingo-sub-2966146%22%20slang%3D%22en-US%22%3EQuestions%20on%20Intune%20-%20Autopilot%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2966146%22%20slang%3D%22en-US%22%3E%3CP%20class%3D%22%22%3EHi%20Community%2C%3C%2FP%3E%3CP%20class%3D%22%22%3E%26nbsp%3B%3C%2FP%3E%3CP%20class%3D%22%22%3EOur%20customer%20is%20looking%20to%20set%20up%20a%20AVD%20environment%20but%20they%20want%20to%20control%20how%20people%20connect%20to%20the%20Virtual%20Desktop%20and%20prevent%20work%20on%20local%20machine%20%2F%20saving%20anything%20locally.%3C%2FP%3E%3CP%20class%3D%22%22%3E%26nbsp%3B%3C%2FP%3E%3CP%20class%3D%22%22%3EInitially%20they%20looked%20at%20Chromebooks%2C%20which%20were%20pretty%20much%20familiar%20except%20that%20they%20could%20not%20get%20the%20smart%20card%20reader%20to%20work%20correctly%20via%20the%20MS%20Chrome%20RD%20App.%3C%2FP%3E%3CP%20class%3D%22%22%3E%26nbsp%3B%3C%2FP%3E%3CP%20class%3D%22%22%3EThen%20they%20looked%20at%20Intune%20%2F%20Autopilot%20to%20effectively%20do%20the%20same%20and%20turn%20a%20laptop%20into%20a%20kiosk%20with%20pretty%20much%20just%20the%20remote%20desktop%20client%20on%20it%2C%20(maybe%20a%20browser)%20and%20apply%20polices%20to%20prevent%20local%20saving%20etc.%20So%20far%20they%20have%20Autopilot%20working%20but%20not%20the%20kiosk.%3C%2FP%3E%3CP%20class%3D%22%22%3E%26nbsp%3B%3C%2FP%3E%3CP%20class%3D%22%22%3E%3CSPAN%20class%3D%22%22%3EQuestion%3A%3C%2FSPAN%3E%3C%2FP%3E%3CP%20class%3D%22%22%3E%26nbsp%3B%3C%2FP%3E%3CP%20class%3D%22%22%3EIs%20there%20any%20viable%20solution%20to%20resolve%20this%3F%3C%2FP%3E%3CP%20class%3D%22%22%3E%26nbsp%3B%3C%2FP%3E%3CP%20class%3D%22%22%3EAny%20guidance%20would%20be%20of%20great%20help!%20Many%20thanks%20in%20advance.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2966146%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EConditional%20Access%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMobile%20Device%20Management%20(MDM)%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2969330%22%20slang%3D%22en-US%22%3ERe%3A%20Questions%20on%20Intune%20-%20Autopilot%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2969330%22%20slang%3D%22en-US%22%3EHi%2C%20Maybe%20instead%20of%20looking%20at%20the%20device%20itself%2C%20if%20you%20prevent%20copy-paste%2F%20mount%20your%20local%20drives%20in%20the%20avd%20environment%20you%20would%20also%20be%20done%3F%3CBR%20%2F%3E%3CBR%20%2F%3EJust%20use%20an%20autopilot%20windows%20device%2C%20make%20sure%20the%20user%20don't%20get%20admin%20permissions..%20so%20you%20will%20end%20up%20with%20a%20nice%20clean%20windows%2010%20with%20only%20a%20rdp%20icon%20on%20the%20desktop..%20And%20they%20could%20install%20anything%20on%20it..%20Maybe%20restricting%20access%20to%20the%20c%3A%20drive%20%3F%3CBR%20%2F%3E%3CBR%20%2F%3EBut%20that's%20my%20opinion%20%3A)%3C%2Fimg%3E%3C%2FLINGO-BODY%3E
Frequent Contributor

Hi Community,

 

Our customer is looking to set up a AVD environment but they want to control how people connect to the Virtual Desktop and prevent work on local machine / saving anything locally.

 

Initially they looked at Chromebooks, which were pretty much familiar except that they could not get the smart card reader to work correctly via the MS Chrome RD App.

 

Then they looked at Intune / Autopilot to effectively do the same and turn a laptop into a kiosk with pretty much just the remote desktop client on it, (maybe a browser) and apply polices to prevent local saving etc. So far they have Autopilot working but not the kiosk.

 

Question:

 

Is there any viable solution to resolve this?

 

Any guidance would be of great help! Many thanks in advance.

1 Reply
Hi, Maybe instead of looking at the device itself, if you prevent copy-paste/ mount your local drives in the avd environment you would also be done?

Just use an autopilot windows device, make sure the user don't get admin permissions.. so you will end up with a nice clean windows 10 with only a rdp icon on the desktop.. And they could install anything on it.. Maybe restricting access to the c: drive ?

But that's my opinion :)