I'm an on-prem guy who's finally embracing 365 and Intune. I've learned a lot so far, and while Intune comes with its fair share of quirks, I didn't find the learning curve as steep as I expected. However, I'm having major issues setting up guest and kiosk modes. At various sites, we need PCs for guests or kiosks for field crews who need to just pop in on terminals set up in the warehouse. Whenever I try guest mode, I end up at the "other user" login page with no option for guest access. In kiosk mode, I just see the 'kioskUser0' login screen, but entering passwords doesn't work for me.
Here's what I've tried without success:
- Windows 10 (22H2) and Windows 11 (24H2)
- Creating a device group specifically for this policy
- Creating a blank compliance policy to apply to this device group
The policies seem to be applying correctly, as I see 'kioskUser0' listed in netplwiz, but I can't get it to work. Any advice would be greatly appreciated!
4 Answers
You shouldn't have these issues with kiosk mode. Make sure you're not dealing with conflicting GPOs. When I set mine up, I went through my GPOs thoroughly and even placed the device in a separate OU. Check your RSOP report and also inspect what Intune settings are applying. Depending on your kiosk setup (single app vs. multi-app), you may need to adjust configurations. For 24H2, the auto sign-in should drop you right into the start menu with the defined apps after logging in. My kiosks run Chrome directly as a multi-app setup and auto-reboot every night to keep things fresh.
I managed to get kiosk mode working with Intune, but you need to be on Windows 11 (24H2). If you hit the lock screen with 'kioskUser0', just leave the password field empty—it should sign in automatically. But if that's not happening, there might be a deeper issue with your configuration.
Nothing seems to work for logging in. It's been really frustrating!
When troubleshooting, ensure that any compliance, configuration, or security policies that affect local accounts are excluded from your kiosks group. For better management, stick to an Entra-only approach. If your compliance policy is already active, and you didn't exclude the kiosks initially, you might need to reprovision Windows, as some settings can leave lingering flags on user accounts even after changing configurations.
For kiosk mode, there shouldn't be a password required. It should auto-log you in. Double-check if any GPOs are running that might conflict with your settings. We ended up making a new OU for our kiosk computers just to avoid any config conflicts. Also, kiosk mode runs better with wired connections—WiFi can be quite slow, causing issues. If problems persist with the kiosks, a reboot usually helps clear things up.
I still get the regular login screen for kioskUser0, and inevitably it asks for a password that I don't have.
I'm trying the guest account route now, but am not seeing progress with kiosk mode. Here’s my policy. Besides that, the only other policies applying to the device are disabling Windows Hello and moving known folders to OneDrive automatically.