If you're not managing your devices using an MDM provider, the following resources may help you get started: In this article, we mention these services. MDM providers, such as Microsoft Intune, use the configuration service providers (CSP) exposed by the Windows OS to manage settings on devices. Consider the domain resources potentially exposed by using a domain account. When using domain accounts with assigned access, proceed with caution.
Using a domain user or service accounts has risks, and might allow an attacker to gain access to domain resources that are accessible to any domain account. Assigned access runs an application using a domain user or service account, not a local account.
Your kiosk users must sign in on the physical device that's set up as a kiosk.įor kiosks in public-facing environments with auto sign-in enabled, you should use a user account with the least privileges, such as a local standard user account.Īssigned access can be configured using Windows Management Instrumentation (WMI) or configuration service provider (CSP).
Kiosk mode isn't supported over a remote desktop connection. User account control (UAC) must be turned on to enable kiosk mode.
