• Windows Kiosks and Restricted User Experiences – Part 2

    This article discusses restricted user experience, the configuration properties for Kiosk mode, and best practices.   Microsoft states that an assigned access restricted user experience allows users to run one or more apps directly from the desktop. Kiosk users see a tailored Start menu displaying only the tiles of permitted… Read ⇢

    Windows Kiosks and Restricted User Experiences – Part 2
  • Windows Autologon with Microsoft Entra ID Account

    In today’s fast-paced digital environments, minimizing user friction is key—especially when it comes to accessing workplace devices. With the rise of cloud identity solutions like Microsoft Entra ID, organizations are shifting toward centralized identity management for both security and convenience. One powerful feature that supports this approach is Windows Autologon… Read ⇢

    Windows Autologon with Microsoft Entra ID Account
  • Hide Windows Settings Items

    When managing Windows devices in a business or educational environment, it’s important to control not just what users can do, but also what they can see—especially in the Windows Settings app. By restricting access to sensitive or unnecessary settings, organizations can prevent end users from accidentally altering configurations that may… Read ⇢

    Hide Windows Settings Items
  • Disable Add or Logon with Microsoft Accounts

    In a world where personal and work lives are increasingly blended on digital devices, organizations face a common challenge: how to keep work devices truly focused on work. One simple but powerful step is to block personal Microsoft accounts on Windows devices. In this blog, we’ll break down what it… Read ⇢

    Disable Add or Logon with Microsoft Accounts
  • Hide Windows Security Notification from System Tray

    In some environments, it’s beneficial to hide Windows Security notifications from system tray to reduce distractions or streamline the user experience—especially when alternative security solutions are in place. In this section, we’ll look at how to implement this setting using Microsoft Intune. By configuring the appropriate policy, you can suppress… Read ⇢

    Hide Windows Security Notification from System Tray
  • Limit Folder Location Access

    Intune offers various profile options to control local storage access on devices. Some options are applied at the device level, while others are for the user level. In environments like shared devices or kiosks, it may be necessary to limit access specifically to the user level. This discussion will focus… Read ⇢

    Limit Folder Location Access
  • Disable OneDrive File Sync

    OneDrive is Microsoft’s cloud storage service that allows users to store, sync, and share files securely across devices. It integrates seamlessly with Windows, Microsoft 365, and other Microsoft services, enabling real-time collaboration on documents, automatic backups, and easy access to files from anywhere. Using a public kiosk device comes with… Read ⇢

    Disable OneDrive File Sync
  • Disable Microsoft 365 Apps Connected Experiences

    Microsoft 365 Apps for Enterprise consists of client software applications and Connected Experiences designed to enable users to create, communicate, and collaborate more effectively. Working with others on a document stored on OneDrive or translating the contents of a Word document into a different language are examples of connected experiences.… Read ⇢

    Disable Microsoft 365 Apps Connected Experiences
  • Windows Kiosks and Restricted User Experiences – Part 1

    This blog will explore the essential properties of Windows kiosks and restricted user experiences, Intune configuration profiles, and the best practices for managing these settings efficiently. Additionally, you can access the GitHub repository containing configuration files and templates to help streamline your setup process. Kiosk devices help organizations in streamlining… Read ⇢

    Windows Kiosks and Restricted User Experiences – Part 1