Zebra Kiosk Mode

by | Mar 1, 2025 | Deployments, Information Technology | 0 comments

Last time we talked about how to get our Zebra scanners into Intune. Today we are going to talk about how to set this unit as a kiosk scanner with a web link and a store app. This setup will be in such a way that we control the wireless networks and access to the device all from one configuration policy. The configuration policy is where we will be making our Zebra Kiosk Mode.

Creating a web app

A web app is super easy to build out. Remember, the scanner should be able to access said app.

  1. Navigate to intune.microsoft.com
  2. On the left-hand side, click Apps
  3. Click Android
  4. Click the Add button.
  5. Under Select app type, we will click Web link, which is under Other.
  6. Then Click Select
  7. This is where you can edit properties.
    • Name: The web link name
    • Description: I like to put the address of the web link here and what it’s for. Some people don’t. It’s up to you.
    • Publisher: I put my company’s name, unless I know for sure who it is.
    • App URL: This is where you will put your link. For example. https://therandomadmin.com
    • Require a managed browser to open this link:
      • This is special as it will require you to have edge or another managed browser like zebra’s managed browser. In our case, this isn’t a needed feature and can cause more issues down the road.
      • Doing a managed browser would force the user into a single tab. This is great for some apps, but others not so much. So, if you want a lockdown on the tabs, this is the way to go, and you will have to make sure you set the system defaults to that browser instead of Chrome.
    • Category: That’s for you to choose
    • Show this as a featured app in the company portal: Once again, not really needed since these will be kiosk machines.
    • Information URL: If the site has an information URL, this is where it would go.
    • Privacy URL: Most websites have a privacy link; this is where you would put that.
    • Developer: Who built it? Maybe a link if you feel like it.
    • Owner: Who is the owner, once again, Maybe a link?
    • Notes: I don’t use this personally, but I have seen where people will put who all should have it.
    • Logo: A good logo for the site; now I have seen a 512×512 PNG file work best for this.
  8. Click Next
  9. Assign your groups
  10. Review and create.

That’s all it takes to make a web link. It’s nothing special.

Other Apps

Create Device Restriction Configuration

This is where we will be doing our Zebra Kiosk Mode. Based on our Microsoft Managed Home Screen, we will create a device restriction, and this app will give us unique controls over the device.

  1. Navigate to Intune.microsoft.com
  2. Navigate to Devices > Android > Configuration
  3. Create a new policy
    • Platform: Android Enterprise
    • Profile Type: Device Restrictions
    • Click Next
  4. Name the policy and give it a good description. Then hit next
  5. These are the settings I am using:
    • General
      • Default Permissions Policy (Work Profile Level) Auto Grant
      • System Update: Automatic
      • Skip first Use Hint: Enabled
      • Locate Device: Allow
      • System Error Warning: Allow
      • Enabled System Navigation Features: Home and overview buttons
      • System Notifications and Information: Show system notifications and information in device status bar

Device Experience

  1. Device Experience Type: Kiosk Mode
  2. Kiosk Mode: Multi App
  3. Custom app layout: Enabled
    • This is where we will place items on the screen. I like having the main web link and the intune app. It looks real nice with a 3×4
  4. Grid Size: 3 Columns x 4 rows
  5. Home Screen.
    • Here you can click each plus button and add the app you want, and it will show up on the machine.
  6. Lock Home Screen: Enabled
  7. App Notification Badges: Enabled
    • I enable these because it lets the end user know what’s happening with the device itself. This is important for updates and the like.
  8. Leave Kiosk Mode: Enabled
  9. Leave Kiosk Mode Code: Make a 4-6 digit pin.
  10. Set a custom URL background:
    • This background for the MC9300 is 480×800.
    • The image must be accessible from the network on its own. If it is not, then we will have issues.
  11. Shortcut to settings menu: Disabled
  12. Quick access to the debug menu: Enable
  13. Wi-fi Allow List
    • This is where you can put the SSID of the networks you want the scanner to connect to. If it’s not in this list, they will not be able to connect to it while in kiosk mode.
  14. Media Volume Controls: Enabled
    • I do this to allow them to control how loud the beeps are. Note that your DataWedge profile needs to be set to media to make this happen.
  15. Quick Access to device information: enabled
    • This bad boy has saved me so many times. It has the device’s serial number. The MC9300 serial numbers are printed on the back, but old eyes just can’t read it. So, having this information at the user’s fingertips really adds to troubleshooting.
  16. Everything else in device restrictions is default.

Users and Accounts

This area is set to block. What that does is it forces the users to only be the kiosk user.

  • Add users: Block
  • User can configure credentials: block
  • User removal: block
  • personal google account: block
  • Account changes: block.

We don’t want you to edit anything with this profile. Hand slap, please.

Customer Support Information

This is where you would place all the customer support information. Like your helpdesk number or emails. I like to have the contact for your IT admins at XYZ. The lock screen message is important because even though we didn’t set it here, if you tell the system to lock via Intune, this message will appear.

Groups and why it’s important

The next area is the groups. So, this is very important. You cannot have two device restriction policies that do kiosk items applied to the same machine! This is very important and can look very weird. So I’m going to give you a simple scenario for you to fully understand.

  • There are three policies.
    • Zebra_Default
      • Assigned Group: Zebra-MC9300-Default
        • Dynamic assignment of android zebra mc9300
    • Zebra_Redzone
      • Assigned Group: Zebra-RedZone
        • Static Assignment
    • Zebra_Bluezone
      • Assigned Group: Zebra-BlueZone
        • Static Assignment

If I have a scanner, and I assign it to group zebra-RedZone. It will get the red zone and the default. The default links the bluezone if it’s assigned to a policy. Thus, now it gets two policies and starts conflicts. So what you have to do for each policy is place all other groups, excluding your default group into the exclude assignment. So, if you want the redzone, place the zebra-redzone inside the zebra_redzone policy assignment and place zebra-bluezone in zebras_redzone exclusion assignment. The Zebra_default will need to have the two zone groups added to it’s exclusion list as well. This makes everyone happy.

Once you have everything assigned, click create. Add the scanner to your group that you want, and it will be applied. We have a few departments like this; by doing it this way, I can give out a passcode to an end user for troubleshooting and not effect any other departments. Plus, I can push out a password change for the kiosk without effecting other departments. I personally set each background to that department name. So they know when scanners float between departments. This has stopped so many fights.

What can we learn as a person?

There is a flow to things in this life. Whether it makes sense or not is a different story. The first time I set up these profiles, I was confused about why I kept getting just one icon. Instead of the four I selected. Then it locked down to the point where it was super Zebra Kiosk Mode and not a usable version. After tracking where things went, I finally figured it out. It was like watching a flow. Sometimes we have that in our lives. Things come up, and they leave you left in the what-happened mode.

I’ll give a great example from my life: car keys. I come home late the night before and place my keys in front of my bed instead of on my nightstand. The next morning, I wake up late, and I’m rushing around. I pull everything out of the nightstand, but the keys are missing. This makes me freak out. Rather than searching frantically, I’ve learned to focus on the events of the previous day. What did I do when I got home? I follow each step until I find where I put my keys. Most of the time, the cat knocked it off. He likes my chest in front of the bed. It’s always a good thing to stop and look at the flow. What’s happening, and where did things go wrong? I hope you go with your flow. You deserve it.

Additional Resources:

Submit a Comment

Your email address will not be published. Required fields are marked *