Solved Kiosk Mode Customization Questions

Where did you get that cmdlet name, Set-AssignedAccessConfiguration? I can't find it anywhere.

Attached is a PowerShell script, based on the article in post #18. It allows Calculator, Weather and Firefox, so you'll want to adjust what's in the XML at the top. The point was to show you can use Store apps and classic Win32 apps.

Near the bottom of the XML, on line 29, you can see I'm assigning it to a specific account. You'll almost surely need to change that, to reflect the account name you want to use. I would recommend you assign things to a test account first, so you can play around with the XML and get it just how you want it. Then, assign it to the real user account when you're satisfied.

The cmdlet was provided by ChatGPT.

Thank you for the .xml or .json file. I may have issues when I get to this point, but my real issue is not being able to determine HOW to enter my file or yours into PowerShell? The syntax I am trying is obviously not correct, but search as I might, ChatGPT was the only place that actually had an answer to that question. Al least that I could find......... The original link you gave me in post #2 was interesting, but at least I could not find how to use PowerShell to enter the file I create.

Looking over your file in more detail. Are you saying that I just copy & past the whole code into PowerShell?

You can save the file I posted in #22, and make sure it saves with a .ps1 extension. Then, if you're new to PowerShell, it's probably easiest to find "PowerShell ISE" on the Start menu, and run it as administrator. Open the file I posted, make adjustments to the user account name and the programs list, and then hit the Play button in the toolbar to run it.

Thanks! So, this makes sense. What does the "namespaceName" portion of the code do?

For lack of a better term, that's the "section" of WMI that this configuration data will get dumped into.

Ok, I am getting pulled away. I will study your code further tomorrow and make the changes. Then try to insert it in PowerShell ISE. See what happens.

Here is the test code I was trying to insert originally.

pseymour,​

I made the necessary changes to your .ps1 script. Implemented it in PowerShell ISE and was successful. Now the issues:

1) AssignedAccess to the user made no difference. Nothing seemed to have changed. I rebooted, still nothing different. User account could still see, access, and run any app.

2) What do I run to back out the AssignedAccess changes? Found a couple of things online, but they did not work?

Oh, one other thing. Not sure it matters, but when I paste the code/script into PowerShell ISE, the run button remains greyed out. I have to hit enter on the keyboard to get any script to run.

Thanks!

Sounds like maybe something is awry with the modified code. Can you paste it here? And if nothing changed for the user, what needs to be rolled back?

Here is your file (Same name but modified) & what the PowerShell ISE accepted. It could be that the PinnedList or AllowedApps I changed did have some syntax errors? I tried to made them exactly like the ones you had in the template.

Plus, I just did not know if having that code/script floating around might harm something latter on....... What is the syntax to see what PowerShell shows for AssignedAccess for that user?

Also, I did NOT generate a new Profile #. I used the one you provided........

I ran the script again & here is the error message:

Write-Output "Successfully applied Assigned Access configuration"
The property 'Configuration' cannot be found on this object. Verify that the property exists and can be set.
At line:56 char:1
+ $obj.Configuration = [System.Net.WebUtility]::HtmlEncode($assignedAcc ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : InvalidOperation: (:) [], RuntimeException
+ FullyQualifiedErrorId : PropertyNotFound

Set-CimInstance : Cannot bind argument to parameter 'InputObject' because it is null.
At line:57 char:37
+ $obj = Set-CimInstance -CimInstance $obj -ErrorVariable cimSetError - ...
+ ~~~~
+ CategoryInfo : InvalidData: (:) [Set-CimInstance], ParameterBindingValidationException
+ FullyQualifiedErrorId : ParameterArgumentValidationErrorNullNotAllowed,Microsoft.Management.Infrastructure.CimCmdlets.SetCimInstanceCommand

There were a few problems with your XML configuration at the top of the script.

• In the AllowedApps element at the top, you had some of the App elements with an attribute of ExecutableName. This attribute should be named AppUserModelId, like the App elements in my example.
• For classic Windows apps (Chrome, Microsoft Office, etc.), you don't put !App at the end of the path.
• After the very last item in the pinned Start menu items list, you had a comma. You don't need a comma after the last item.

btvarner said:

Oh, one other thing. Not sure it matters, but when I paste the code/script into PowerShell ISE, the run button remains greyed out. I have to hit enter on the keyboard to get any script to run.

Click to expand...

Sounds like you are pasting the code into the blue PowerShell console at the bottom of the ISE, rather than opening the file I posted and you modified. I had said, "Open the file I posted, make adjustments to the user account name and the programs list, and then hit the Play button in the toolbar to run it."

Also, in the Microsoft article I linked in #18, it says to open PowerShell using PSExec. You would have to open PowerShell ISE the same way. It sounds like you're not doing that, given the errors you posted. The command for that would be powershell_ise.exe, rather than powershell.exe.

---

Not trying to be a jerk here, but with all of the above stuff, plus the introduction of "Set-AssignedAccessConfiguration," which ChatGPT didn't say, at least in what you posted here, it sounds like directions are not being followed. I don't say that to be mean, but it's very important that directions are followed with this stuff. The XML has to comply with the expected format, and Microsoft's and my instructions have to be followed. If you're not sure about something, just ask.

Understand. Let me try again and let you know.....

pseymour,​

Thanks for your effort on this thread! I have decided to no longer pursue implementation of Assigned Access. Thank you.

Understandable. It’s not exactly user friendly. I’m empathetic to your situation; I hope you find something that works for you.