Windows 10: Photos app triggering AppLocker in Multi-App Kiosk

I have a fairly mature Windows 10 Multi-App Kiosk system delivered via Intune.Recently I'm unsure when this first presented, users have reported being unable to launch the native Windows UWP Photos app via the Start Menu, nor by opening an image file via Explorer Photos is the default app for image filetypes.Clicking the Photos app in the menu simply results in nothing happening other than the tile sometimes goes dark as if the App was updating.Attempting to open an image file results in the error popup "This operation has been cancelled due to restrictions in effect on this computer.", ho

:)

 

Assigned Access (Multi App Kiosk Mode) Always on top

We are using a multi app kiosk setup that allows the users to open various programs. The problem is we use a time keeping app that times their use that should be always on top in the bottom right hand corner. Unfortunately the application only shows when
they open another application and as soon as they close it the desktop covers up the time keeping app. Is there any way to override the desktop from always being on top in multi App Kiosk mode? I'm using an XML file to configure the computer with a provisioning
package.

Thanks

 

Unblock Toast notifications on Intune multi-app kiosk

I have a system utilising a multi-app kiosk delivered by Intune. The default settings block any and all Toast Notification popups. The system is for a Library setting and the library management system (Libki) session time reminder notifications are being blocked.

I have tested the app on the same device without the restrictions and the toasts are displayed without issue. I have so far found a great number of registry settings that have unblocked the notification settings in various blades in the Settings app, and outwardly it looks like it should be allowing the toasts. However, when running as the unrestricted account, the Settings>System>Notification & Actions shows the Libki app in the "Get notifications from these apps" list. When logged in as the kiosk user, that list shows only the "Tablet mode" app.

I'm aware that there is an SQL lite db in the local appdata folder that has some interaction with the registry settings in HKCU\Software\Microsoft\Windows\CurrentVersion\Notifications

but have been unable to get Libki to populate into the list in Settings. I suspect that that alone, or in combination with the resultant options that should be available to me thereafter, will probably allow the notifications.

Any help would be greatly appreciated.

Martin

 

Win 10 Lockdown / Kiosk with multiple apps

I'm trying to set up locked down PCs for public use. I've tried the the multi-app lockdown / kiosk feature via provisioning package but with the lockdown features' group policies the users couldn't access removable media like USB sticks. I'm sure this is
intended but for my purposes the users need to be able to save data from USB sticks on the PCs harddrive.

Is it possible to use the multi-app lockdown and still provide access to USB sticks or is there some kind of a workaround?

The "lockdown" via applocker and group policies has proven a hassle and doesn't work properly for me.