Recommended for enterprise. Deploy via Microsoft Intune using a custom OMA-URI policy.
| Field | Value |
|---|---|
| Name | AssignedAccess Configuration |
| OMA-URI | ./Vendor/MSFT/AssignedAccess/Configuration |
| Data type | String |
| Value | (Open downloaded XML file and copy entire contents) |
Required if: Your Start or Taskbar pins use desktopAppLink (reference .lnk file paths)
Deployment options:
Download the Shortcut Creator script: Switch to Local / Script export mode, then click Shortcut Creator
Only needed if: You want custom names/icons for Edge shortcuts instead of "Microsoft Edge" branding
Deployment: Same as above - deploy as Intune Script or Win32 App (see Step 7 below)
Download the Manifest Override scripts: Switch to Local / Script export mode, then click Manifest Override (includes both install and remove scripts)
For Option B above: Follow these steps to package both scripts as Win32 apps
IntuneWinAppUtil.exe to a folder (e.g., C:\IntuneTools\)C:\IntunePackaging\ShortcutCreator\CreateShortcuts_Lobby-Kiosk.ps1)IntuneWinAppUtil.exe -c "C:\IntunePackaging\ShortcutCreator" -s "CreateShortcuts_YourConfigName.ps1" -o "C:\IntunePackaging\Output"
.intunewin file to IntuneInstall command (replace filename with your actual script name):
powershell.exe -ExecutionPolicy Bypass -File "CreateShortcuts_YourConfigName.ps1"
Uninstall command:
powershell.exe -Command "Write-Host 'Shortcuts remain in place'"
Detection script (PowerShell):
# Detect Shortcut Creator - checks for sentinel file
$sentinelPath = "$env:ProgramData\KioskOverseer\ShortcutCreator.installed"
if (Test-Path $sentinelPath) {
Write-Host "Shortcut Creator installed"
exit 0
} else {
exit 1
}
Note: The Shortcut Creator script automatically creates this sentinel file - no manual modification needed.
C:\IntunePackaging\ManifestOverride\IntuneWinAppUtil.exe -c "C:\IntunePackaging\ManifestOverride" -s "KioskOverseer-EdgeVisualElements-Install.ps1" -o "C:\IntunePackaging\Output"
.intunewin file to IntuneInstall command:
powershell.exe -ExecutionPolicy Bypass -File "KioskOverseer-EdgeVisualElements-Install.ps1"
Uninstall command:
powershell.exe -ExecutionPolicy Bypass -File "KioskOverseer-EdgeVisualElements-Remove.ps1"
Detection script (PowerShell):
# Detect Manifest Override - checks for backup file and scheduled task
$taskExists = Get-ScheduledTask -TaskName "KioskOverseer-EdgeVisualElements" -ErrorAction SilentlyContinue
$backupExists = Test-Path "$env:ProgramFiles\Microsoft\Edge\Application\msedge.VisualElementsManifest.xml.kioskoverseer.bak"
if ($taskExists -and $backupExists) {
Write-Host "Manifest Override installed"
exit 0
} else {
exit 1
}
For standalone devices or testing. Simple two-step process: download the All-In-One script and run it as SYSTEM.
Switch to Local / Script export mode and click All-In-One Script to download the deployment script. This script handles everything: applies XML, creates shortcuts, and configures the kiosk.
Execute the script using PsExec to run as SYSTEM:
psexec -i -s powershell.exe -ExecutionPolicy Bypass -File "C:\path\to\Apply-AssignedAccess.ps1"
The device will reboot to apply the kiosk configuration.
-s flag) provides an easy way to run PowerShell as SYSTEM.
For bulk deployment during OOBE or to existing devices.
desktopAppLink (.lnk file paths).