TemplateXMLKiosk
Assigned Access XML Template
Starter XML template with proper formatting to get you comfy with XML kiosk development.
Scripts, templates & exports
Everything I've shared on the blog, in one place. Test in a pilot ring first — these are starting points, not magic.
Settings exportJSONKiosk
Assigned Access CSP Starter Set
Starter Settings Catalog export for locking down your kiosk through Intune.
ScriptPowerShellKiosk
Edge Kiosk Shortcut Script
A usable platform script to publish Edge kiosk web apps.
Community toolKiosk
Assigned Access Designer
A GUI application for building Assigned Access configs, developed by Nicholas Pilzner (Mostly Compliant Endpoint).
by Nicholas Pilzner
ScriptPowerShellAutopilot
Autopilot V2 Device Rename
Platform script that names Autopilot Device Preparation devices PREFIX + BIOS serial, with placeholder-serial and DNS collision checks.
ScriptPowerShellSecurity
Secure Boot 2026 Certificate Audit
Detection script that reports whether the Windows UEFI CA 2023 certificate is active, inactive or missing.
ScriptPowerShellSecurity
Detect App Control Base Policy
Remediation detection that catches App Control supplemental policies that never attached to their base.
ScriptPowerShellSecurity
McAfee Removal (MCPR) Win32 package
Intune Win32 wrapper around McAfee’s MCPR cleanup tool with retry logic and logging.
ScriptPowerShellSecurity
HP Wolf Security Removal
Uninstalls HP Wolf Security, Client Security Manager and Security Update Service in the right order for Win32 deployment.
ScriptPowerShellUpdates
Windows 11 Upgrade Appraiser Reset
Clears stale TargetVersionUpgradeExperienceIndicators and re-runs the compatibility appraiser so devices re-evaluate for Windows 11.
ScriptPowerShellUpdates
Windows Update Pause & Deferral Cleanup
Runs DISM health restore and removes leftover pause/deferral registry values that block feature updates.
Reference docs worth bookmarking
- Microsoft Learn — Troubleshooting and logsWhere Assigned Access logs live and how to read them.
- Microsoft Learn — Multi-app (restricted user experience)Quickstart for multi-app kiosks with Intune.
- Microsoft Learn — Single-app kioskQuickstart for single-app kiosks with Intune.
- Microsoft Learn — XML elements & examplesReference for every Assigned Access XML element.
Seeded from the Assigned Access Resources page plus scripts linked in posts. Each entry is a JSON file in src/content/scripts/, editable in Keystatic.