Assigned Access Kiosk Mode

Question

Hello

I am trying to deploy Kiosk Mode via a XML, please see the XML below:

<?xml version="1.0" encoding="utf-8"?>

<AssignedAccessConfiguration xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns="http://schemas.microsoft.com/AssignedAccess/2017/config" xmlns:default="http://schemas.microsoft.com/AssignedAccess/2017/config" xmlns:rs5="http://schemas.microsoft.com/AssignedAccess/201810/config" xmlns:v3="http://schemas.microsoft.com/AssignedAccess/2020/config" xmlns:v5="http://schemas.microsoft.com/AssignedAccess/2022/config">

<Profiles>

<Profile Id="{7C5ASA78-A0FB-LF6C-874A-C0FDB459FA8E}">

  <AllAppsList>

    <AllowedApps>

      <App AppUserModelId="Microsoft.MicrosoftEdge.Stable_8wekyb3d8bbwe!App" />

    </AllowedApps>

  </AllAppsList>

  <Taskbar ShowTaskbar="true" />

</Profile>

</Profiles>

<Configs>

<Config>

  <AutoLogonAccount rs5:DisplayName="AssignedAccessKiosk">

    <Password>AssignedKiosk@2025!</Password>

  </AutoLogonAccount>

  <DefaultProfile Id="{7C5ASA78-A0FB-LF6C-874A-C0FDB459FA8E}" />

</Config>

</Configs>

</AssignedAccessConfiguration>

This is a simple XML that should deploy assigned access kiosk with only Edge allowed to run on the device. Separate to this, I am creating a local account with the same password and another script to clear all desktop shortcuts other than Edge.

In Intune I just get a message saying error but after looking at event viewer, I am getting 2 errors.

1. Assigned Access Configuration Failed, Error Code (0xC00CE169)
2. "{7C5ASA78-A0FB-LF6C-874A-C0FDB459FA8E}" violates pattern constraint of "{[0-9a-fa-F]{8}-([0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12}}". The attribute "id" with value "{7C5ASA78-A0FB-LF6C-874A-C0FDB459FA8E}" failed to parse. Error Code (0xC00CE169)

Please could I get some assistance with this?

Answer 1

@Suki Singh, Thanks for posting in Q&A. From the error message, it seems one attribute in xml is not correct. Based on my researching, with <AutoLogonAccount>, Assigned Access creates and manages a user account to automatically sign in after a device restarts. So I think this account can't be configured with <Password>.

Meanwhile, to add local user into kiosk profile, we need to ensure the user account is available on the device. So password property is not able to create here.

https://learn.microsoft.com/en-us/windows/configuration/assigned-access/configuration-file?pivots=windows-11#local-user

Please remove the <Password>.to see if it works.

If there's any update, feel free to let us know.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.