Kiosk Mode Settings for Mobile Devices in Configuration Manager

 

Updated: May 14, 2015

Applies To: System Center 2012 Configuration Manager SP2, System Center 2012 R2 Configuration Manager SP1

Note

The information in this topic applies to System Center 2012 Configuration Manager SP1 or later, and System Center 2012 R2 Configuration Manager or later.

Configuration Manager kiosk mode allows you to lock a managed mobile device to only allow certain features to work. For example, you can allow a device to only run one managed app that you specify, or you can disable the volume buttons on a device. These settings might be used for a demonstration model of a device, or a device that is dedicated to performing only one function, such as a point of sale device.

Kiosk mode settings are configured in a mobile device configuration item. To get started creating this type of configuration item, see How to Create Mobile Device Configuration Items for Compliance Settings in Configuration Manager.

Kiosk Mode for iOS Devices

Note

  • Before you can configure an iOS device for kiosk mode, you must use the Apple Configurator Tool to put the device into supervised mode. For more information, see your Apple documentation.

  • If the iOS app you specify is installed after you deploy the configuration policy, the device will not enter kiosk mode until after it is restarted.

  1. On the Configure Kiosk Mode Settings for iOS Devices page of the Create Configuration Item Wizard, specify the following information:

    Setting

    More information

    Select App

    Select the app that will be allowed to run when the device is in kiosk mode. No other apps will be allowed to run on the device. Choose from:

    • Managed App – Click Browse, then select a managed app.

    • Store App – specify the URL to an app on the app store then click Get App ID to populate the App ID field.

    To find the app URL:

    • Using a search engine, find the app you want to use in the iTunes App Store and open the page for the app.

    • Copy the URL of the page and use this as the URL to specify the app you want to run in kiosk mode.

    • Example: Search for Microsoft Word for iPad. The URL you use will be https://itunes.apple.com/us/app/microsoft-word-for-ipad/id586447913?mt=8.

    Touch

    Enables or disables the touch screen on the device.

    Screen rotation

    Enables or disables changing the screen orientation when you rotate the device.

    Volume buttons

    Enables or disables the use of the volume buttons on the device.

    Ringer switch

    Enables or disables the ringer (mute) switch on the device.

    Screen sleep and wake button

    Enables or disables the screen sleep wake button on the device.

    Auto lock

    Enables or disables automatic locking of the device.

    Mono audio

    Enables or disables the accessibility setting Mono audio.

    Voice over

    Enables or disables the accessibility setting VoiceOver which reads aloud text on the device display.

    Voice over adjustments

    Enables or disables voiceover adjustments which let you adjust the VoiceOver function (for example, how fast on-screen text is read aloud).

    Zoom

    Enables or disables the Zoom accessibility setting which lets you use touch to zoom into the device display.

    Zoom adjustments

    Enables or disables zoom adjustments which let you adjust the zoom function.

    Invert colors

    Enables or disables the Invert Colors accessibility setting which adjusts the display to help users with visual impairments.

    Invert colors adjustments

    Enables or disables invert colors adjustments which let you adjust the invert colors function.

    Assistive touch

    Enables or disables the Assistive Touch accessibility setting which helps users perform on screen gestures which might be difficult for them to perform.

    Assistive touch adjustments

    Enables or disables assistive touch adjustments which let you adjust the assistive touch function.

    Speech selection

    Enables or disables the Speak Selection accessibility settings which can read aloud the text you select.

    Remediate noncompliant settings

    Select if you want to remediate noncompliant configuration settings (when supported).

    Noncompliance severity for reports

    Specify the severity level that is reported if this compliance policy is evaluated as noncompliant. The available severity levels are the following:

    • None Devices that fail this compliance rule do not report a failure severity for Configuration Manager reports.

    • Information Devices that fail this compliance rule report a failure severity of Information for Configuration Manager reports.

    • Warning Devices that fail this compliance rule report a failure severity of Warning for Configuration Manager reports.

    • Critical Devices that fail this compliance rule report a failure severity of Critical for Configuration Manager reports.

    • Critical with event Devices that fail this compliance rule report a failure severity of Critical for Configuration Manager reports. This severity level is also be logged as a Windows event in the application event log.

  2. When you are finished, click Next.

  3. Complete the Create Configuration Item Wizard with any other settings you require.

Next Steps

Once you are done, use the information in How to Create Configuration Baselines for Compliance Settings in Configuration Manager to add the configuration item to a configuration baseline.

Then, deploy the configuration baseline to the required devices. For details, see How to Deploy Configuration Baselines in Configuration Manager.

Finally, you can monitor the success of the configuration baseline by using the information in How to Monitor for Compliance Settings in Configuration Manager.