• Go to Microsoft Intune admin center
• Select Devices → Configuration profiles

• Click + Create profile
• Platform: Windows 11
• Profile type: Templates → Custom

• Assign to a device group
• Device will sync and apply configuration

Required if: Your Start or Taskbar pins use desktopAppLink (reference .lnk file paths)

Deployment options:

• Option A (Simpler): Deploy as Intune Script (Devices → Scripts → Add PowerShell script)
• Option B (More Control): Package as Win32 App with detection rules and dependencies (see Step 7 below)

Click Shortcut Creator in the Export section above to download the script

Only needed if: You want custom names/icons for Edge shortcuts instead of "Microsoft Edge" branding

Deployment: Same as above - deploy as Intune Script or Win32 App (see Step 7 below)

Click Manifest Override in the Export section above to download both install and remove scripts

For Option B above: Follow these steps to package both scripts as Win32 apps

7a. Get IntuneWinAppUtil Tool

1. Download from Microsoft GitHub
2. Extract IntuneWinAppUtil.exe to a folder (e.g., C:\IntuneTools\)

7b. Package Shortcut Creator

1. Create source folder: C:\IntunePackaging\ShortcutCreator\
2. Place downloaded Shortcut Creator script in folder (e.g., CreateShortcuts_Lobby-Kiosk.ps1)
3. Run IntuneWinAppUtil (replace filename with your actual script name):

   IntuneWinAppUtil.exe -c "C:\IntunePackaging\ShortcutCreator" -s "CreateShortcuts_YourConfigName.ps1" -o "C:\IntunePackaging\Output"

4. Upload the generated .intunewin file to Intune

Install command (replace filename with your actual script name):

powershell.exe -ExecutionPolicy Bypass -File "CreateShortcuts_YourConfigName.ps1"

Uninstall command:

powershell.exe -Command "Write-Host 'Shortcuts remain in place'"

Detection script (PowerShell):

# Detect Shortcut Creator - checks for sentinel file
$sentinelPath = "$env:ProgramData\KioskOverseer\ShortcutCreator.installed"
if (Test-Path $sentinelPath) {
    Write-Host "Shortcut Creator installed"
    exit 0
} else {
    exit 1
}

Note: The Shortcut Creator script automatically creates this sentinel file - no manual modification needed.

7c. Package Manifest Override

1. Create source folder: C:\IntunePackaging\ManifestOverride\
2. Place both install and remove scripts in folder
3. Run IntuneWinAppUtil:

   IntuneWinAppUtil.exe -c "C:\IntunePackaging\ManifestOverride" -s "KioskOverseer-EdgeVisualElements-Install.ps1" -o "C:\IntunePackaging\Output"

4. Upload the generated .intunewin file to Intune

Install command:

powershell.exe -ExecutionPolicy Bypass -File "KioskOverseer-EdgeVisualElements-Install.ps1"

Uninstall command:

powershell.exe -ExecutionPolicy Bypass -File "KioskOverseer-EdgeVisualElements-Remove.ps1"

Detection script (PowerShell):

# Detect Manifest Override - checks for backup file and scheduled task
$taskExists = Get-ScheduledTask -TaskName "KioskOverseer-EdgeVisualElements" -ErrorAction SilentlyContinue
$backupExists = Test-Path "$env:ProgramFiles\Microsoft\Edge\Application\msedge.VisualElementsManifest.xml.kioskoverseer.bak"

if ($taskExists -and $backupExists) {
    Write-Host "Manifest Override installed"
    exit 0
} else {
    exit 1
}

• Device reboots to apply kiosk configuration
• Sign in with kiosk account to test