Windows 10 pro Kiosk XML

[interp1]

Hi,

I have a XML for multi-app kiosk in Windows 10 pro and Push it with Workspace one to devices. 

I have some questions.

1) All downloads with the browser Edge is blocked. We want exclude .ica downloads. How we can do it?
2) How can I make .lnk on the kiosk screen?

My XML:

<?xml version="1.0" encoding="utf-8" ?>

<AssignedAccessConfiguration

    xmlns="http://schemas.microsoft.com/AssignedAccess/2017/config"

   xmlns:rs5="http://schemas.microsoft.com/AssignedAccess/201810/config"

   >

    <Profiles>

       <Profile Id="{e27401b8-01f4-4bdc-96dc-ddbd0591dbf0}">

           <AllAppsList>

                <AllowedApps>

                    <App AppUserModelId="Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge"/>

                    <App AppUserModelId="Microsoft.Windows.Explorer"/>

<App DesktopAppPath="C:\Program Files\Google\Chrome\Application\chrome.exe"/>

<App DesktopAppPath="C:\Program Files (x86)\AnyDesk-c61e1296_msi\AnyDesk-c61e1296_msi.exe"/> 

<App DesktopAppPath="C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"/> 

<App DesktopAppPath="C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe"/> 

<App DesktopAppPath="C:\Program Files (x86)\Citrix\ICA Client\wfica32.exe"/>

<App DesktopAppPath="C:\Program Files (x86)\Citrix\ICA Client\Ctx64Injector64.exe"/>

<App DesktopAppPath="C:\Program Files (x86)\Citrix\ICA Client\CtxBrowserInt.exe"/>

<App DesktopAppPath="C:\Program Files (x86)\Citrix\ICA Client\CtxTwnPA.exe"/>

<App DesktopAppPath="C:\Program Files (x86)\Citrix\ICA Client\HdxBrowser.exe"/>

<App DesktopAppPath="C:\Program Files (x86)\Citrix\ICA Client\HdxRtcEngine.exe"/>

<App DesktopAppPath="C:\Program Files (x86)\Citrix\ICA Client\icaconf.exe"/>

<App DesktopAppPath="C:\Program Files (x86)\Citrix\ICA Client\migrateN.exe"/>

<App DesktopAppPath="C:\Program Files (x86)\Citrix\ICA Client\NMHost.exe"/>

<App DesktopAppPath="C:\Program Files (x86)\Citrix\ICA Client\pcl2bmp.exe"/>

<App DesktopAppPath="C:\Program Files (x86)\Citrix\ICA Client\PdfPrintHelper.exe"/>

<App DesktopAppPath="C:\Program Files (x86)\Citrix\ICA Client\RawPrintHelper.exe"/>

<App DesktopAppPath="C:\Program Files (x86)\Citrix\ICA Client\SetIntegrityLevel.exe"/>

<App DesktopAppPath="C:\Program Files (x86)\Citrix\ICA Client\wfcwow64.exe"/>

<App DesktopAppPath="C:\Program Files (x86)\Citrix\ICA Client\XpsNativePrintHelper.exe"/>

<App DesktopAppPath="C:\Program Files (x86)\Citrix\ICA Client\XPSPrintHelper.exe"/>

<App DesktopAppPath="C:\Program Files (x86)\Citrix\ICA Client\CDViewer.exe"/>

<App DesktopAppPath="C:\Program Files (x86)\Citrix\ICA Client\concentr.exe"/>

<App DesktopAppPath="C:\Program Files (x86)\Citrix\ICA Client\cpviewer.exe"/>

<App DesktopAppPath="C:\Program Files (x86)\Citrix\ICA Client\CtxCFRUI.exe"/>

<App DesktopAppPath="C:\Program Files (x86)\Citrix\ICA Client\redirector.exe"/>

<App DesktopAppPath="C:\Program Files (x86)\Citrix\ICA Client\WebHelper.exe"/>

<App DesktopAppPath="C:\Program Files (x86)\Citrix\Citrix WorkSpace 2109\InstallHelper.exe"/>

<App DesktopAppPath="C:\Program Files (x86)\Citrix\Citrix WorkSpace 2109\Receiver.exe"/>

<App DesktopAppPath="C:\Program Files (x86)\Citrix\Citrix WorkSpace 2109\ReceiverCleanupUtility.exe"/>

<App DesktopAppPath="C:\Program Files (x86)\Citrix\Citrix WorkSpace 2109\TrolleyExpress.exe"/>

<App DesktopAppPath="C:\Program Files (x86)\Citrix\ICA Client\Browser\Browser.exe"/>

<App DesktopAppPath="C:\Program Files (x86)\Citrix\ICA Client\Browser\CtxWebBrowser.exe"/>

<App DesktopAppPath="C:\Program Files (x86)\Citrix\ICA Client\Receiver\Ceip.exe"/>

<App DesktopAppPath="C:\Program Files (x86)\Citrix\ICA Client\Receiver\CitrixReceiverUpdater.exe"/>

<App DesktopAppPath="C:\Program Files (x86)\Citrix\ICA Client\Receiver\ConfigurationWizard.exe"/>

<App DesktopAppPath="C:\Program Files (x86)\Citrix\ICA Client\Receiver\PrefPanel.exe"/>

<App DesktopAppPath="C:\Program Files (x86)\Citrix\ICA Client\Receiver\Receiver.exe"/>

<App DesktopAppPath="C:\Program Files (x86)\Citrix\ICA Client\Receiver\SRProxy.exe"/>

<App DesktopAppPath="C:\Program Files (x86)\Citrix\ICA Client\SelfServicePlugin\CitrixBrandingIcon.exe"/>

<App DesktopAppPath="C:\Program Files (x86)\Citrix\ICA Client\SelfServicePlugin\CleanUp.exe"/>

<App DesktopAppPath="C:\Program Files (x86)\Citrix\ICA Client\SelfServicePlugin\NPSPrompt.exe"/>

<App DesktopAppPath="C:\Program Files (x86)\Citrix\ICA Client\SelfServicePlugin\Receiver.exe"/>

<App DesktopAppPath="C:\Program Files (x86)\Citrix\ICA Client\SelfServicePlugin\SelfService.exe"/>

<App DesktopAppPath="C:\Program Files (x86)\Citrix\ICA Client\SelfServicePlugin\SelfServicePlugin.exe"/>

<App DesktopAppPath="C:\Program Files (x86)\Citrix\ICA Client\SelfServicePlugin\SelfServiceUninstaller.exe"/>

                </AllowedApps>

           </AllAppsList>

       <rs5:FileExplorerNamespaceRestrictions>

               <rs5:AllowedNamespace Name="Downloads"/>

   </rs5:FileExplorerNamespaceRestrictions> 

              <StartLayout>

                <![CDATA[<LayoutModificationTemplate xmlns:defaultlayout="http://schemas.microsoft.com/Start/2014/FullDefaultLayout" xmlns:start="http://schemas.microsoft.com/Start/2014/StartLayout" Version="1" xmlns="http://schemas.microsoft.com/Start/2014/LayoutModification">

                    <LayoutOptions StartTileGroupCellWidth="6" />

                    <DefaultLayoutOverride>

                        <StartLayoutCollection>

                            <defaultlayout:StartLayout GroupCellWidth="6">

                                <start:Group Name="INTER-PSY GROEP">

                                    <start:Tile AppUserModelID="Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge" Size="2x2" Column="0" Row="0"/>

<start:DesktopApplicationTile Size="2x2" Column="2" Row="0" DesktopApplicationLinkPath="C:\Program Files (x86)\AnyDesk-c61e1296_msi\AnyDesk-c61e1296_msi.exe" />

<start:DesktopApplicationTile Size="2x2" Column="4" Row="0" DesktopApplicationLinkPath="C:\Program Files\Google\Chrome\Application\chrome.exe" /> 

</start:Group>

                            </defaultlayout:StartLayout>

                        </StartLayoutCollection>

                    </DefaultLayoutOverride>

                </LayoutModificationTemplate>

                ]]>

            </StartLayout>

<Taskbar ShowTaskbar="true"/> 

       </Profile>

   </Profiles>

   <Configs>

       <Config>

           <AutoLogonAccount />

           <DefaultProfile Id="{e27401b8-01f4-4bdc-96dc-ddbd0591dbf0}"/>

       </Config>

   </Configs>

</AssignedAccessConfiguration>

[Phil_Helmling]

Have a look at https://github.com/helmlingp/WS1UEM_CustomKiosk/blob/main/ExampleKioskProfile_with_CitrixWorkspaceAp... example.

on Edge browser blocking ICA files, I guess you would deploy the Browser CSP - https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser but not sure as I've not done that