Automate Windows 11 Kiosk Setup

I’m rolling out kiosk-mode PCs across our Windows 11 Enterprise fleet and need two clean, repeatable automation paths: 1. A PowerShell script that MECM can push to selected devices. 2. A parallel Intune configuration so future devices can be enrolled cloud-only with the same experience. Both approaches must pick up an editable TXT file that simply lists the approved apps; at deployment the script or policy should read that file and lock the device down to those entries. For now the list will contain our preferred browser and several in-house apps, and I’ll later extend it, so please structure the logic to handle additions without code changes. Some of those apps can run with their out-of-box settings, others will need custom configurations (for example, disabling context menus in the browser or pre-setting a URL for our custom tools). I’ll supply the exact tweaks during testing; what I need from you is a clear way to inject them—registry, XML, JSON, whatever you feel is most supportable. Deliverables • PowerShell script ready for MECM deployment • Intune configuration (profile, shell scripts, or provisioning package) that achieves the same lockdown • A concise README covering prerequisites, file locations, and how an admin updates the TXT list or custom settings • Success criteria script or steps so I can confirm the device is indeed in single-app (or multi-app) kiosk mode with only the specified titles available Please keep everything compatible with current Windows 11 Enterprise builds and reference standard tooling—PowerShell, Microsoft Endpoint Manager, Windows Configuration Designer—so my team can maintain it in the future. Looking forward to working with someone who has done kiosk mode at scale before and can get this running smoothly.

Projekt-ID: 40073050