Windows 10: Unblock Toast notifications on Intune multi-app kiosk

Martin J. Little · Sep 20, 2023

I have a system utilising a multi-app kiosk delivered by Intune. The default settings block any and all Toast Notification popups. The system is for a Library setting and the library management system Libki session time reminder notifications are being blocked.I have tested the app on the same device without the restrictions and the toasts are displayed without issue. I have so far found a great number of registry settings that have unblocked the notification settings in various blades in the Settings app, and outwardly it looks like it should be allowing the toasts. However, when running as

:)

Brink · Sep 20, 2023

Simplifying kiosk management for IT with Windows 10

This post outlines the investments Microsoft is making to simplify the configuration and management of kiosk devices, improving Windows 10 as a kiosk platform for IT organizations. Our investments in kiosk and Firstline Worker scenarios are part of a bigger mission to simplify IT in the modern workplace.

You see kiosks everywhere you go: in airports, supermarkets, movie theaters, restaurants, banks, and many other places. Kiosks have many forms and functions. What most people don’t realize is that many of them are powered by Windows.

Windows has long been the platform of choice for kiosk devices because of its security capabilities, the availability of applications, enterprise software assurance support, and a broad ecosystem of device and peripheral partners. Today we see a growing number of IT organizations developing and deploying their own kiosk solutions using standard hardware and, in some cases, repurposing existing hardware.

We use the term “kiosk” as an umbrella term for a broad category of devices, but it generally boils down to two main scenarios:

Kiosks that are used in the “public” domain and do not require users to login or authenticate.

Kiosks that are shared by Firstline Workers to complete a specific task, which typically requires the user to authenticate before accessing the device.

Both usage scenarios have a few requirements in common:

The need for security, regardless of where the kiosks are deployed.

A consistent experience for each person who uses them, so that no one person can modify the device in a way that impacts the next user.

The need for an intuitive experience that is focused on the task at hand.

In the past year, with every Windows feature update, we’ve introduced significant improvements to our kiosk capabilities:

Assigned access enables you to create not only single app kiosks for customers, but also provides the capability to create a kiosk that runs multiple apps.

Assigned access now works with Windows 10 Pro and higher, including in S Mode.

Windows Configuration Designer includes a wizard for single-app kiosk configuration. Install a provisioning package and your device is ready to go.

Multi-app kiosks now support both Universal Windows Platform (UWP) apps and classic Win32 apps.

You can deploy curated kiosk experiences directly from the cloud using Microsoft Intune.

We continue to add more policies that enable IT to tailor the experience for end users. To name a few: power settings to enable any device to run 24/7, touch keyboard configuration policies, locked down Start screen, and more.

For more information, see Set up a kiosk or digital signage on Windows 10. You can also watch a quick demo on setting up a kiosk using Microsoft Intune or using a provisioning package.

With the upcoming release of Windows 10, version 1803, we are taking the next steps in our efforts to make kiosks even more capable – and easier to deploy and configure. Some key assigned access enhancements include:

Support for multiple screens for digital signage use cases.

The ability to ensure all MDM configurations are enforced on the device prior to entering assigned access using the Enrollment Status page.

The ability to configure and run Shell Launcher in addition to existing UWP Store apps.

A simplified process for creating and configuring an auto-logon kiosk account so that a public kiosk automatically enters a desired state after a reboot, a critical security requirement for public-facing use cases.

For multi-user Firstline Worker kiosk devices, instead of specifying every user, it’s now possible to assign different assigned access configurations to Azure AD groups or Active Directory groups.

To help with troubleshooting, you can now view error reports generated if an assigned access-configured app has issues.

Kiosk Browser

We are excited to complete the circle of support for classic Windows desktop apps and UWP Store Apps with a new Kiosk Browser app. The Kiosk Browser app is built on Microsoft Edge and can be used to create a tailored browsing experience. Kiosk Browser is great for presenting interactive web apps and digital signage content. Kiosk Browser can be configured to navigate to a default URL without showing any UI. When used with other types of kiosks, it can be configured with a list of allowed URLs and the UI elements that should be presented (e.g. navigation buttons). It can also be configured to automatically clear user data between sessions.

To ensure IT has control, Kiosk Browser can only be configured through provisioning or an MDM provider such as Intune. Please refer to our documentation for more information on how to deploy and configure Kiosk Browser.

The Kiosk Browser is available in the Microsoft Store for Business for you to try out yourself.

Looking forward

This post would not be complete without sharing some of our future plans. We will continue to make it easier for IT departments to manage, configure, and deploy Windows 10 kiosks for customers and Firstline Workers, and plan to include the following capabilities in a future Windows 10 feature update:

Deploy a kiosk device with minimal user interaction, thanks to Windows AutoPilot and device management support. Simply unbox the device, start it up, and the device is ready to go. Stay tuned; this will be available to Windows Insiders in preview soon.

Enabling device management to remotely trigger a Windows AutoPilot Reset to bring a kiosk back to a pristine state for a reliable kiosk experience.

Integration of the Kiosk Browser’s functionality directly into Microsoft Edge to support a larger scope of web scenarios.

To learn more about Windows kiosks, check out our Windows kiosk documentation. I encourage you to try out the capabilities and leave a comment below if there are other enhancements and scenarios you would like from the platform.
Click to expand...

Source: Simplifying kiosk management for IT with Windows 10 - Microsoft Tech Community - 187691

Tip How to Setup Assigned Access (Kiosk Mode) in Windows 10

Cluster Head · Sep 20, 2023

What's new in Microsoft Intune

What's new in Microsoft Intune

May 2016

With the exception of TeamViewer integration, all of these features are also supported for hybrid deployments (Configuration Manager with Intune). For more information about new hybrid features, check out the Hybrid What’s New page.

Documentation

Welcome to the preview version of docs.microsoft.com! This is a completely new, modern content platform designed to make it easier for you, our customers to understand and use Intune. To read about all of the new features, see Introducing docs.microsoft.com

Intune service health

Service health information for Intune has been moved to a central location with other Microsoft services. You'll now find this information in the Office 365 management portal under Service Health. For more information, see this blog post.

App management

•MAM SDK: Support PIN length configuration. You will be able to specify the length of the PIN for MAM apps similar to a device PIN. This will require end users to comply with the new restrictions you set. They will see a slightly modified PIN screen to account for the longer input. For details, see MAM policy settings for Android, and MAM policy settings for iOS.

•Skype for Business for iOS and Android. You can now target Skype for business with MAM without enrollment policies. Once users log in, the MAM policies will be applied.

•New apps available for management with MAM policies. The Microsoft Word, Excel, and PowerPoint apps for Android can now be associated with MAM policies on devices that are not enrolled with Intune. For a full list of supported apps, go the Microsoft Intune mobile application gallery on the Microsoft Intune application partners page.

Device management
•Remote assistance sessions for Windows PCs. TeamViewer integration for Windows PCs managed by the Intune client software will let you establish remote assistance sessions with Windows PCs to support your help desk department. Supported PCs include Windows 7, 8, 8.1 and Windows 10. For details, see Common Windows PC management tasks with the Microsoft Intune computer client

Company portal updates

Android Company portal app

•End user toast notifications: End users will now see toast notifications from the Android Company Portal app when they are enrolling their devices or removing their devices from the Company Portal.

•Changes to Device Enrollment Managers accounts in the Android Company Portal app. To improve performance and scale, Intune is no longer showing all Device Enrollment Managers (DEM) devices in the My Devices pane of the Android Company Portal app. Only the local device running the app is displayed, and only if it is enrolled via the Company Portal app. The DEM user may perform actions on the local device, but remote management of other enrolled devices can only be performed from the Intune admin console. -

Company Portal website

Company Portal website: Device identification banner will provide more information to end users. End users can now more easily identify the device they’ve selected when they are using the Company Portal website. If the wrong device is selected, they will be able to select the correct device by tapping the Tap here link in the home page banner.

What's coming

•Message center UI onboarding. As part of the migration of Intune into the Office 365 Management portal, we will begin taking advantage of their Message Center to communicate new features and other notifications. Also, by installing the companion Office 365 Admin mobile app, you can receive notifications on your mobile phone and easily forward any messages to users or a distribution alias. We will begin using the Message Center with our May release to notify you when updates are completed and will include information on new and improved Intune features. Check out the Message Center today by logging into the Office 365 Management portal and choosing the MESSAGE CENTER option in the left navigation pane.

•Changes to Device Enrollment Managers accounts. To improve performance and scale, Intune is no longer showing all Device Enrollment Managers (DEM) devices in the My Devices pane of the iOS Company Portal app. Only the local device running the app is displayed, and only if it is enrolled via the Company Portal app. The DEM user may perform actions on the local device, but remote management of other enrolled devices can only be performed from the Intune admin console. Additionally, Intune is deprecating use of DEM accounts with either the Apple Device Enrollment Program or the Apple Configurator tool. Both these enrollment methods already support user-less enrollment for shared iOS devices. Only use DEM accounts when user-less enrollment for shared devices is unavailable.

Cloud roadmap

Keep informed about upcoming developments for Intune with the Cloud Platform roadmap.

Service deprecation

•Intune Viewer apps. With the release of the new RMS sharing app, we are removing the following Intune Viewer apps, beginning August, 2016:
◦Intune AV Viewer
◦Intune PDF Viewer
◦Intune Image Viewer for Android from Google Play

Instead of using the Intune Viewer apps, we recommend using the new Rights Management app (RMS sharing) for Android, which allows you to deploy one app instead of three separate apps to securely view corporate files on Android devices. Learn more about the RMS sharing app (with link to documentation).

•Custom Group Targeting of Notification Rules Removal. Intune notification rules define who an email alert will be sent to from Intune. Currently, you can configure notification rules to send emails to all users of devices in an Intune device group that you created. From around June 1st 2016 moving forward, targeting user-created groups will no longer be supported.

Today, to target a notification rule to a group you created from the Microsoft Intune administration console, you would take the following steps:

In the Admin workspace, click Notification Rules > Create New Rule

In step two of the Create Notification Rule Wizard, select the device groups which the rule will target. This step, “select device groups”, is being removed from the Intune Console.

The preliminary timeline for this change is as follows:
◦In June, 2016, new tenants will not see step two of the Create Notification Rule Wizard. Exiting tenants are unaffected.
◦Around August, 2016, some existing tenants will not see the “select device groups” in the wizard.
◦Around October, 2016, we expect that all tenants will not see the “select device groups” in the wizard.

•Changes in support for the iOS Company Portal app. In the coming months, there will be an update for the Microsoft Intune Company Portal app for iOS that will only support devices running iOS 8.0 or later. Users won’t be able to enroll new devices running versions below iOS 8.0. Enrolled devices running versions below iOS 8.0 will continue to be managed and will, for a limited time, be able to continue using the Company Portal app. However, devices must be on iOS 8.0 or later to access the latest versions of the Company Portal app. We encourage you to notify users to update to iOS 8.0 or later to take full advantage of new Intune features.

Previous Intune releases

If you want to see what's released in Intune during the last six months, they are listed in the Previous Intune releases article.
Click to expand...

Source: https://docs.microsoft.com/en-us/int...ntune#may-2016

Telos · Sep 20, 2023

Controlled folder access blocking toast notifications no longer appear

When I first initiated "Controlled folder access" I would get toast notifications when a new app was blocked. I could then allow that app by opening the recently blocked app list , and make an exception for the blocked app.

A few weeks ago the toast notifications stopped for this feature (otherwise they are active). Now when a program fails to load, I have to toggle off controlled folder access and retry the program launch. If successful, I then manually locate that program to make an exception, as it does not appear in the recently blocked apps list.

How do I again receive toast notifications, and why are the blocked programs no longer appearing in the recently blocked apps list? Is there a means to manually clear the recently blocked list? This anti-ransomware feature has become a nuisance to manage.

Does anyone here use this?

Windows 10: Unblock Toast notifications on Intune multi-app kiosk

Unblock Toast notifications on Intune multi-app kiosk

Unblock Toast notifications on Intune multi-app kiosk

Unblock Toast notifications on Intune multi-app kiosk

Unblock Toast notifications on Intune multi-app kiosk - Similar Threads - Unblock Toast notifications

Photos app triggering AppLocker in Multi-App Kiosk

Photos app triggering AppLocker in Multi-App Kiosk

Photos app triggering AppLocker in Multi-App Kiosk

Toast Notifications for When Apps Are Out of Date

Toast Notifications for When Apps Are Out of Date

Unblock Toast notifications on Intune multi-app kiosk

Unblock Toast notifications on Intune multi-app kiosk

Windows 10 multi-app kiosk - apps not available

windows toast notification from electron app