Apply Kiosk End Session Button Policy For Full Browser Reset With HTMD Intune Blog

Let’s discuss Implementing Kiosk’s End Session Button Policy for Full Browser Reset with Intune. policy settings control availability and function of a “End Session” button. in the Microsoft Kiosk Browser application using Microsoft Intune.

When clicked, it will ask the user for confirmation and then perform a full reset from browsing session: delete all browsing data (cache, cookies, form data, etc.) and automatically navigates the browser back to the default start URL.

Organizations choose to enable or disable “End Session” button based on the intended use case and the level of user control and privacy required. The main reason for enabling this policy is to increase user personal And data security on a shared device.

In scenarios where users deal with sensitive information (for example, bankinghealth records, personal login), provides “End SessionThe ” button offers peace of mind and is a standard best practice public terminal.

Apply Kiosk End Session Button Policy for Full Browser Reset with Intune

“End SessionThe “button” is a key component of the security design and user management for public access kiosks. The server logs into various personal accounts (email, social media). Enabling this button allows users to responsibly end their web access and ensure the computer is returned to a clean and sanitary condition. default state for the next protector.

Configure Policies from the Intune Portal

By logging into Microsoft Intune Admin center you can easily configure Access Windows Applications policy. Sign in with the Microsoft Intune Admin center. Go to Devices > Configuration > +Create >+ New Policy.

Policy Making Profile

After that, you can Create a Profile for the policy you want to configure. To create a profile you must select the platform and profile type. Here I selected Windows 10 and later as the Platform and Settings catalogue as profile type. Then click on Make knob.

Filling in Basic Details

In Basic tab You can add a policy Name and Description for further reference. The Name field is required to identify the policy objective and information shows more information. That Name is mandatory and if you want to add a description you can add it. Click on Next Knob.

Configure Windows Application Access Tasks

The Configuration settings page is provided to select settings for creating policies. The Settings Catalog provides a large number of settings. To select settings, click on +Add settings hyperlink. Then you will get Picker Settings. Choose Kiosk Browser and select End Session Button Policy. Then I closed it Settings Selector.

Disable End Session Button

The dedicated one End session button is not visible in the Kiosk browser interface. This is default value for this policy setting. If you want to continue with this section, click Next knob.

Enable the End Session Button

When activated, End session button visible in the Kiosk browser interface. So user can select this button after finished using Kiosk. Click on Next knob.

Scope Tag

By using scope tag You can limit visibility End Session Button Policy. It helps to organize resources too. Here I want to skip this part because it is not mandatory. Click on Next knob.

Tasks Tab for Selecting Groups

To assign policies to specific groups, you can use Tasks Tab. Here I click, +Add group option under Included groups. I select a group from the group list and click Choose knob. Again, I click on Choose button to continue.

Final Steps in Policy Making

To complete policy creation, you can review all policy details at Review + create tab. This helps to avoid mistakes and successfully configured that policy. After varying all the details, click Make Knob. After creating the policy you will get a success message.

Monitoring Status

That Monitoring Status the page shows whether the policy was successful or not. To quickly configure policies and take advantage of policy synchronization, devices in Enterprise Portal, Go to Intune Portal. Go to Devices > Configuration > Search Policies. Here, the policy is shown as succeed.

Client Side Verification with Event Viewer

If you get success message, it doesn’t mean you’ll get any policy benefits. To vary the policies successfully configured to the client device, check the Event Viewer. Filter for Event ID 813: This will help you find relevant logs quickly.

Open Event Viewer: Go to Start > Event Viewer. Navigate to Logs: In the left pane, go to Applications and Services > Microsoft > Windows > Logs Enterprise-Device Management-Diagnostics Provider > Admin.

Event ID details
MDM Policy Manager: Set policy into, Policy: (EnableEndSessionButton), Area: (Kiosk Browser), Registration ID requesting merge: (EB427D85-802F-46D9-A3E2-D5B414587F63), Current User: (Device), Int: (0x1), Registration Type: (0x6), Scope: (0x0).

Delete an Assigned Group from End Session Button Policy

If you want to remove an Assigned group from a policy, this can be done from the Intune Portal. To do this, go to Policies in the Intune Portal and Edit Tasks tab and Delete the policy.

To get more detailed information, you can refer to our previous post – Learn How to Delete or Unassign Apps from Intune using Step by Step Guide.

How to Remove the End Session Button Policy

You can easily delete Policies from Intun Portal From Configuration section You can delete the policy. It will be completely removed from the client device.

For more information, you can refer to our previous post – How to Remove Allow Clipboard History Policy in Intune Step by Step Guide.

Windows CSP details

If this policy is enabled, the Kiosk Browser application will display a to button reset browser. When the user selects the button, the application will ask the user for confirmation to end the session. When the user confirms, Kiosk browser will delete all browsing data (cache, cookies, etc.) and navigate back to Default URL.

Need More Help or Have a Technical Question?

Join LinkedIn Page AndTelegram Group to get step by step guides and news updates. Join usMeeting Pageto participate in User group meetings. Also, JoinWhatSApplication Communityto get the latest newsMicrosoftTechnology. We were thereredditas well.

Author

Anoop C Nairhas been a Microsoft MVP for 10 consecutive years from 2015 onwards. He is a Workplace Solutions Architect with over 22+ years of experience in the Workplace technology space. He is a leader of the Community of Bloggers, Speakers, and Local User Groups. The main focus is on Device Management technologies such as SCCM and Intune. He writes about technologies like Intune, SCCM, Windows, Cloud PC, Entra, Microsoft Security, Career, etc.