Kiosk & VDI

Lock the desk. Keep cloud RDP alive.

AppKiosk clears Assigned Access cages so Temp→mstsc clients still launch.

Why Intune Single-App fails here

Cloud clients write a temporary .rdp under %TEMP% and launch mstsc.exe. Assigned Access cages the session — child process and Temp launch die. Teams skip kiosk entirely.

Thin client VDI desk

Aegis AppKiosk

  • Clears Assigned Access
  • Temp writable for Users (not Desktop/Docs)
  • .rdp → mstsc association
  • Auto-start kioskAppPath (e.g. V2Cloud)
  • AppLocker extras: mstsc + %TEMP%\*
Managed devices

Modes compared

Pick the mode that matches the room — not a one-size cage.

Locked desktop
LockedDesktop

Hardened Explorer

Store off, shell limits — multi-window.

Single app
SingleApp

Assigned Access

Browser / UWP only — not for Temp RDP.

AppKiosk
AppKiosk

Win32 + Temp RDP

V2Cloud-friendly full kiosk.

VDI
VdiThinClient

VDI-only lockdown

Hide drives, clipboard off, folder deny.

Profiles → AppKiosk

One-click preset, then set kioskAppPath under Controls.

Pilot AppKiosk