NEW Kiosk device configuration profile vs windows security baseline setting

[Selvapriyan]

Hi Everyone,

First of all thank you prajwal for providing a platform to discuss

Currently, we are migrating to Windows 11 with Entra-only joined devices. We have a security baseline applied to all computers. I am trying to set up a desktop in kiosk mode so a specific Win32 app, Genetec Security’s CCTV monitoring tool, opens and loads by itself. The kiosk device configuration is applied to the device, and I can see the kiosk user0. The challenge is that the machine is not auto-logging in. I tried logging in with my global admin account and rebooting, but the issue persists. When I try to log in using the local kiosk user account, it prompts me to set a new password. I researched extensively and made some changes to the security baseline, but the problem remains. I have just created a ticket with Microsoft to determine exactly which setting in the security baseline is preventing the kiosk action. I believe some account/password-related policy set in the baseline is causing this issue.

 

[TimH]

Hi Selvapriyan,

This might be the Device Lock settings in the security profile.
Try and make a copy of the security baseline profile and then put the kiosk into the collection and remove the Device Lock from the copy. (Also remember to exclude the kiosk from the original)

Best Regards
Tim