Configure Take a Test in kiosk mode

You can use Intune for Education or a custom profile in Microsoft Intune:

• Intune for Education provides a simpler experience
• A custom profile provides more flexibility and controls over the configuration

Configure Take a Test from Intune for Education

To configure devices using Intune for Education, follow these steps:

1. Sign in to the Intune for Education portal
2. Select Groups > Pick a group to configure Take a Test for
3. Select Windows device settings
4. Expand the Take a Test profiles category and select + Assign new Take a Test profile
5. Specify a Profile Name, Account Name, Assessment URL and, optionally, Description and options allowed during the test
6. Select Create and assign profile

Configure Take a Test with a custom policy

To configure devices with Microsoft Intune, create a custom policy and use the following settings:

Assign the policy to a group that contains as members the devices or users that you want to configure.

To create a provisioning package, you can either use Set up School PCs or Windows Configuration Designer:

• Set up School PCs provides a simpler, guided experience
• Windows Configuration Designer provides more flexibility and controls over the configuration

Create a provisioning package using Set up School PCs

Create a provisioning package using the Set up School PCs app, configuring the settings in the Set up the Take a Test app page.

Create a provisioning package using Windows Configuration Designer

Use the following settings to create a provisioning package:

Apply the provisioning package to the devices that you want to configure.

Configure your devices using PowerShell scripts via the MDM Bridge WMI Provider.

To test the PowerShell script, you can:

1. Download the psexec tool
2. Open an elevated command prompt and run: psexec.exe -i -s powershell.exe
3. Run the script in the PowerShell session

Edit the following sample PowerShell script to:

• Customize the assessment URL with $testURL
• Change the kiosk user tile name displayed in the sign-in screen with $userTileName

$testURL = "https://contoso.com/algebra-exam"
$userTileName = "Take a Test"
$namespaceName = "root\cimv2\mdm\dmmap"
$ParentID="./Vendor/MSFT/Policy/Config"

#Configure SharedPC
$className = "MDM_SharedPC"
$instance = "SharedPC"
$cimObject = Get-CimInstance -Namespace $namespaceName -ClassName $className
if (-not ($cimObject)) {
   $cimObject = New-CimInstance -Namespace $namespaceName -ClassName $className -Property @{ParentID=$ParentID;InstanceID=$instance}
}
$cimObject.AccountModel = 1
$cimObject.EnableAccountManager = $true
$cimObject.KioskModeAUMID = "Microsoft.Windows.SecureAssessmentBrowser_cw5n1h2txyewy!App"
$cimObject.KioskModeUserTileDisplayText = $userTileName
Set-CimInstance -CimInstance $cimObject

#Configure SecureAssessment
$className = "MDM_SecureAssessment"
$instance = "SecureAssessment"
$cimObject = Get-CimInstance -Namespace $namespaceName -ClassName $className
if (-not ($cimObject)) {
   $cimObject = New-CimInstance -Namespace $namespaceName -ClassName $className -Property @{ParentID=$ParentID;InstanceID=$instance}
}
$cimObject.LaunchURI= $testURL
Set-CimInstance -CimInstance $cimObject

#Configure interactive logon
$className = "MDM_Policy_Config01_LocalPoliciesSecurityOptions02"
$instance = "LocalPoliciesSecurityOptions"
$cimObject = Get-CimInstance -Namespace $namespaceName -ClassName $className
if (-not ($cimObject)) {
   $cimObject = New-CimInstance -Namespace $namespaceName -ClassName $className -Property @{ParentID=$ParentID;InstanceID=$instance}
}
$cimObject.InteractiveLogon_DoNotDisplayLastSignedIn = 1
Set-CimInstance -CimInstance $cimObject

#Configure Windows logon
$className = "MDM_Policy_Config01_WindowsLogon02"
$instance = "WindowsLogon"
$cimObject = Get-CimInstance -Namespace $namespaceName -ClassName $className
if (-not ($cimObject)) {
   $cimObject = New-CimInstance -Namespace $namespaceName -ClassName $className -Property @{ParentID=$ParentID;InstanceID=$instance}
}
$cimObject.HideFastUserSwitching = 1
Set-CimInstance -CimInstance $cimObject

For more information, see Use PowerShell scripting with the WMI Bridge Provider.

To create a local account, and configure Take a Test in kiosk mode using the Settings app:

1. Sign into the Windows device with an administrator account

2. Open the Settings app and select Accounts > Other Users

3. Under Other users, select Add account > I don't have this person's sign-in information > Add a user without a Microsoft account

4. Provide a user name and password for the account that will be used for testing

5. Select Accounts > Access work or school

6. Select Create a test-taking account

7. Under Add an account for taking tests, select Add account > Select the account created in step 4

8. Under Enter the tests's web address, enter the assessment URL

9. Under Test taking settings select the options you want to enable during the test

   • To enable printing, select Require printing

     Note

     Make sure a printer is pre-configured on the Take a Test account if you're enabling this option.

   • To enable teachers to monitor screens, select Allow screen monitoring

   • To allow text suggestions, select Allow text suggestions

10. To take the test, a student must sign in using the test-taking account selected in step 4

    Note

    To sign-in with a local account on a device that is joined to Microsoft Entra ID or Active Directory, you must prefix the username with either <computername>\ or .\.