Comments on: Setup an Edge Chromium based Kiosk device with Microsoft Intune

By: Steve

Steve — Fri, 08 Sep 2023 08:03:23 +0000

In reply to vartaxe.

I also have this issue. Identity_helper.exe causes ‘this app has been blocked by the administrator’ error.
It looks as though identity helper is something to do with edge, how can we whitelist this to allow it to run/not be blocked?
Unfortunately our configuration requires Edge added as multi app kiosk, as we have a need for it not to run in private/kiosk mode. Any suggestions from anyone?

By: vartaxe

vartaxe — Sun, 06 Aug 2023 14:13:07 +0000

also i keep having some popups regarding the “C:\Program Files (x86)\Microsoft\Edge\Application\114.0.1823.86\identity_helper.exe” or runtimebroker.exe or standalone updater… whats going on?

By: vartaxe

vartaxe — Thu, 03 Aug 2023 08:29:06 +0000

have been playing a lot around this lately and there is one major issue i still encounter. and thats with custom shortcuts like google.lnk with custom icon like google.ico and pointing to “”C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe” –kiosk https://www.google.com/ –edge-kiosk-type=public-browsing –kiosk-idle-timeout-minutes=1 –no-first-run” the problem is no matter jow much i try to tweak something the pinned start shortcut will either no be displayed, or not displying the custom ico, or displaying a blank icon or even just display the default edge icon… as a workwound i also tried with with pinning edge secondary tiles pointing to custom secondary tile asset icon pointing to etc and this works for normal user but when in kiosk mode the icon will be blank… i start to think that either something is broken or there is a limitation with kiosk mode or maybe its just “applocker” but cant find anything that helps. any sugestions? thanks

By: Sascha R

Sascha R — Tue, 12 Apr 2022 13:30:44 +0000

Hi Peter,
first time I tried to set up a Kiosk and it worked without problems. Thank you!
But… I have one Question , hope you dont mind. I try to change the monitor orientation to potrait after deployment. I used a PS Script, deployed that , tried again to pack it as Win32 App but without sucess. Any ideas?

Thanks

By: Sidnei Stein

Sidnei Stein — Fri, 30 Apr 2021 15:25:04 +0000

Now that new Edge are available under Single App Kiosk mode, how do we manage the Favorite bar and add it to?
The single app looks pretty secure and restrict and looks like we can’t do to much with Edge settings.
Did you have any idea on how to customize Edge in Single App Kiosk mode?

By: Peter Klapwijk

Peter Klapwijk — Wed, 13 May 2020 08:53:29 +0000

In reply to Dilip.

Hi Dilip,

Than allow both, the lnk and chrome.exe, but make the lnk file the one which auto starts (if required) and the one shown in the startmenu.
Must say when I discussed the kiosk setup with an MS employee and told him the Edge.lnk did work he was pretty surprised 😀

Regards,

Peter

By: Dilip

Dilip — Wed, 13 May 2020 08:36:54 +0000

Hi Peter,

Giving Chrome.exe works fine and launches chrome but the usecase is to open chrome in kiosk mode so gave the lnk path and kiosk as parameter as your did for edge. Will try to find the reason you mentioned, just thought of checking with you if any we need to configure anything in intune setting to unlock the chrome app

By: Peter Klapwijk

Peter Klapwijk — Tue, 12 May 2020 19:37:06 +0000

In reply to Dilip.

Hi Dilip,

Give it a try with the Chrome.exe file instead of the .lnk file.
Otherwise during the test phase, allow C:\WINDOWS\System32\mmc.exe and C:\Windows\system32\eventvwr.msc to run (and add it to the startmenu) so you have access to the App Locker event logs via event viewer, to see what is exactly blocked.
AppId/ AUMID for these are Microsoft.AutoGenerated.{BB044BFD-25B7-2FAA-22A8-6371A93E0456} and {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\mmc.exe.
This helped me in finding out why is sometimes received a message from blocked apps (an Xbox app was running in the background)

Regards,

Peter

By: Dilip

Dilip — Tue, 12 May 2020 19:26:20 +0000

Hi Peter,

Nice article. I tried to follow your article for my usecase to configure multiapp kiosk, run chrome in kiosk mode and Microsoft Teams. Tried the same solution by copying chrome lnk instead of edge lnk path. For some reason. When I login as kiosk user and run chrome,it pops up saying, this app is blocked by your system administrator. Teams runs fine. Even I tried steps for edge in kiosk with lnk. Edge runs fine in kiosk mode. Observed that third party software like chrome and Firefox is getting blocked when I put Google Chrome.lnk path. Some UAC is blocking from opening I think. Not sure what setting required in intune to allow chrome to run. Appreciate your help. Thanks in advance.

By: Peter Klapwijk

Peter Klapwijk — Wed, 22 Apr 2020 18:16:52 +0000

In reply to Giovani. Hi Giovani, Unfortunately I haven`t seen a setting to force full screen mode, or hide the address bar. Settings I`d also like to see in a next Edge version.