A complete guide for Windows kiosk mode

1. Open the web browser on the Windows device to be enrolled.
2. Type in the Hexnode enrollment URL which will be in the format https://yourportal.hexnodemdm.com/enroll/.
3. Click Download, thus initiating the Hexnode Installer app download on the Windows device.
4. Open the app on the device and select Yes on the Hexnode Installer Setup wizard to allow the app to make changes to the device. Now, click Install.
5. After reading the EULA agreement on the Hexnode Installer app, click on Agree and Enroll.
6. The Hexnode Installer checks for the enrollment authentication settings with the portal and then processes the enrollment request. If the process succeeds, go to step 8.
7. If the enrollment request process fails,
   1. Click on Enroll. The user will now be redirected to Settings > Accounts > Access Work or School > Enroll in Device Management.
   2. In Set up a work or school account, the admin’s username and the enrollment server address will be auto-filled. Now click on Next.
   3. After reading the instructions concerning the device setup, click Got it. A connection will now be established between Hexnode and Workplace or School. All the apps and configurations that the organization has set up for the user will soon be pushed to the device. If the user doesn’t get access to these after waiting for a few minutes, navigate to Settings > Accounts > Access Work or school > Info and click Sync.
8. Now, the Hexnode UEM app will get installed on the device, thereby applying all configurations to the device. Click Done to exit the Hexnode Installer. Also, click on Finish to exit the Setup Wizard.

1. On the Windows device, navigate to Settings > Accounts > Access work or school.
2. Choose Enroll only in device management and enter the work mail ID. Click Next.
3. Close the tab that now appears asking for the Microsoft password.
4. Now type in the server URL which will be in the format https://yourportal.hexnodemdm.com/enroll/ and click Next.
5. After reading the instructions concerning the device setup, click Got it. The device has now been successfully enrolled in the Hexnode UEM portal.

A connection will now be established between Hexnode and Workplace or School. All the apps and configurations that the organization has set up for the user will soon be pushed to the device. If the user doesn’t get access to these after waiting for a few minutes, navigate to Settings > Accounts > Access Work or school > Info and click Sync.

In this method, an enrollment request consisting of the enrollment instructions and the server URL for enrolling the devices is sent to users via Email or SMS.

1. Under the Enroll tab, choose Platform Specific > Windows > Windows PCs & Tablets.
2. Click on Switch to Authenticated Enrollment > Authenticated Enrollment.
3. Choose the type of users (AD/ Microsoft Entra ID/ Local/ Google/ Okta) to be enrolled via the Enrollment Request.
4. Pick the Ownership type: Personal, Corporate, Let the user choose, or Choose it later. Let the user choose enables the user to choose the ownership type during the enrollment and Choose it later lets the admin choose the ownership type at a later step. Now, click Next.
5. Choose either Email, or SMS or both, depending on how the enrollment request has to be sent.
6. Change the Domain and select the respective User. Click Send.

1. Under the Enroll tab, choose Platform Specific > Windows > Windows PCs & Tablets.
2. Click on Switch to Authenticated Enrollment > Authenticated Enrollment.
3. Choose the type of users (AD/ Microsoft Entra ID/ Local/ Google/ Okta) to be enrolled via the Enrollment Request.
4. Pick the Ownership type: Personal, Corporate, Let the user choose, or Choose it Later. Click Next.

1. Open the web browser on the Windows device to be enrolled.
2. Type in the Hexnode enrollment URL which will be in the format https://yourportal.hexnodemdm.com/enroll/.
3. Click Download, thus initiating the Hexnode Installer app download on the Windows device.
4. Open the app on the device and select Yes on the Hexnode Installer Setup wizard to allow the app to make changes to the device. Now, click Install.
5. After reading the EULA agreement on the Hexnode Installer app, click on Agree and Enroll.
6. The Hexnode Installer checks for the enrollment authentication settings with the portal.
7. For local or AD users, email ID/SAMAccount Name must be entered for authentication. Microsoft/Googe/Okta users can sign in with the corresponding directory credentials. Then click Authenticate.
8. Click Enroll to re-authenticate in case the error message “Authentication failed! Try Again!” is displayed.
9. Now, the device will process the enrollment request. If the process fails,
   1. Click on Enroll to enroll the device. The user will now be redirected to Settings > Accounts > Access Work or School > Enroll in Device Management.
   2. In Set up a work or school account, the admin’s username and the enrollment server address will be auto-filled. Now click on Next.
   3. After reading the instructions regarding the device setup, click Got it. A connection will now be established between Hexnode and Workplace or School. All the apps and configurations that the organization has set up for the user will soon be pushed to the device. If the user doesn’t get access to these after waiting for a few minutes, navigate to Settings > Accounts > Access Work or school > Info and click Sync.

Now, the Hexnode UEM app will get installed on the device, thereby applying all configurations to the device. Click Done to exit the Hexnode Installer. Also, click on Finish to exit the Setup Wizard.

1. On the Windows device, navigate to Settings > Accounts > Access work or school.
2. Choose Enroll only in device management and enter the work mail ID. Click Next.
3. Close the tab that now appears asking for the Microsoft password.
4. Now type in the server URL which will be in the format https://yourportal.hexnodemdm.com/enroll/ and click Next.
5. For local or AD users, after selecting the domain from the dropdown, the corresponding email ID/SAMAccount Name must be entered for authentication. Microsoft/Googe/Okta users can sign in with the corresponding directory credentials. Then click Authenticate.
6. After reading the instructions regarding the device setup, click Got it. The Windows PC has now been successfully enrolled in the Hexnode portal.

A connection will now be established between Hexnode and Workplace or School. All the apps and configurations that the organization has set up for the user will soon be pushed to the device. If the user doesn’t get access to these after waiting for a few minutes, navigate to Settings > Accounts > Access Work or school > Info and click Sync.

Microsoft Store apps can be deployed and installed on Windows devices using the Mandatory Apps policy in the Hexnode portal.

1. Login to the Hexnode UEM portal and navigate to the Policies tab.
2. Click New Policy or edit an existing policy. In case of a new policy, enter the policy name and description in the respective field.
3. Select Windows > App Management > Mandatory Apps > Configure.
4. Click +Add and choose Add App or Add Group.
5. The required application can be searched either from Local Apps or directly from the Public Store. Once the app is selected, click Done.
6. On selecting Add Group, search and select the required apps similarly and click Done.
7. Navigate to the Policy Targets subtab and associate the policy to the required Devices/Device Groups/Users/User Groups/Domains and Save the policy.

Method I

1. In the Hexnode UEM portal, navigate to the Manage tab and select the required devices.
2. From Actions, select Install Application.
3. Uncheck iOS, Android, macOS, and tvOS checkboxes in Local Apps, and search and select the required app. Apps can be directly installed from Public Store also. Once the required app is selected, click Done.

Method II

1. In the Hexnode UEM portal, navigate to the Manage tab and select the required device, thereby moving to the device summary page of the corresponding device.
2. From Actions, select Install Application.
3. Uncheck iOS, Android, macOS, and tvOS checkboxes in Local Apps, and search and select the required app. Apps can be directly installed from Public Store also. Once the required app is selected, click Done.

1. Click on the Start button > Settings > Accounts > Family and other people.
2. Under Other people, select Add someone else to this PC.
3. Click on I don’t have this person’s sign-in information and select Add a user without a Microsoft account.
4. Fill in the username, password, and other necessary fields of the kiosk account.

1. Click on the Start button > Settings > Accounts > Other people.
2. Select Add someone else to this PC.
3. Choose Users from the inset box.
4. Under Actions, click on Users > More actions > New User.
5. Fill in the username, password, and other necessary fields of the kiosk account.

Now, the standard local user account will be set up on the Windows device.

As mentioned earlier, customizing the start layout implies the process of arranging the apps involved in kiosk mode as per how the user wishes to view the apps on the start menu and the device screen.

To customize and export the Start layout as per user requirement, follow the steps given below:

1. Login to the admin account and Pin apps to Start. From the Start menu, right-click on the required app and select Pin to Start. For the apps that are not to be displayed in the layout, right-click on the app and select Unpin from Start. Drag tiles to group the apps.
2. Now, right-click on Start and select Windows PowerShell.
3. Enter the command Export-StartLayout –path .xml in Windows PowerShell, where -path signifies the path and file name of the XML file to be exported.
   For example, Export-StartLayout -path C:/Users/David/KioskLayout.xml.

1. In the Hexnode UEM portal, navigate to the Policies tab.
2. Click on the kiosk policy and under the Manage dropdown, select Move to Archive.

When a policy is archived, it will be moved to Archived Policies, and the policy targets will be removed automatically.

1. In the Hexnode UEM portal, navigate to the Policies tab.
2. Click on the kiosk policy and under Policy Targets, select the remove option corresponding to the device.

1. In the Hexnode UEM portal, navigate to the Manage tab.
2. Select the required device and navigate to Policies. Click on the trash can icon corresponding to the kiosk policy.