WIN10 使用POWERSHELL 設置單應用KIOSK模式(win10家庭版或企業版)

win10 使用PowerShell 設置單應用kiosk模式

win10 家版或企業版PowerShellshell 啟動器 v1Autologon.exe

注意事項

• win10 家庭版或企業版。
• 下載安裝Autologon.exe。
• Shell 啟動器 v1調用的應用程序不可有黑窗(類似cmd)。
• 以下示例采用賬號：
  - 賬戶：'KIOSK'
  - 密碼：'KIOSK'

設置步驟

新建用戶

1.進入windows設置->賬戶->其他用戶，點擊'將其他人添加到這台電腦'；

2.右鍵用戶，點擊新用戶,如圖下操作：

下載並執行Autologon.exe：自動輸入 Windows 登錄用戶密碼

  

1. 開啟功能：輸入正確賬號和密碼后，點擊圖片'Enable'。
2. 關閉功能：輸入正確賬號后，點擊圖片‘Disable’。

使用 PowerShell 配置自定義 shell

新建文件'kiosk.ps1'(文件名隨意)

'kiosk.ps1'文件內容

1. 文件內部關於'KIOSK'的地方都要修改成你新建用戶的名稱。
2. 文件內部'$ShellLauncherClass.SetCustomShell'第二個參數為調用程序的路徑。
3. 文件最后有3段代表'開啟'，'刪除'，'禁用'，需要使用其中一個功能的時候，一定要注釋其他兩段，如下。

 

 

# Check if shell launcher license is enabled
function Check-ShellLauncherLicenseEnabled
{
    [string]$source = @"
using System;
using System.Runtime.InteropServices;

static class CheckShellLauncherLicense
{
    const int S_OK = 0;

    public static bool IsShellLauncherLicenseEnabled()
    {
        int enabled = 0;

        if (NativeMethods.SLGetWindowsInformationDWORD("EmbeddedFeature-ShellLauncher-Enabled", out enabled) != S_OK) {
            enabled = 0;
        }
        
        return (enabled != 0);
    }

    static class NativeMethods
    {
        [DllImport("Slc.dll")]
        internal static extern int SLGetWindowsInformationDWORD([MarshalAs(UnmanagedType.LPWStr)]string valueName, out int value);
    }

}
"@

    $type = Add-Type -TypeDefinition $source -PassThru

    return $type[0]::IsShellLauncherLicenseEnabled()
}

[bool]$result = $false

$result = Check-ShellLauncherLicenseEnabled
"`nShell Launcher license enabled is set to " + $result
if (-not($result))
{
    "`nThis device doesn't have required license to use Shell Launcher"
    exit
}

$COMPUTER = "localhost"
$NAMESPACE = "root\standardcimv2\embedded"

# Create a handle to the class instance so we can call the static methods.
try {
    $ShellLauncherClass = [wmiclass]"\\$COMPUTER\${NAMESPACE}:WESL_UserSetting"
    } catch [Exception] {
    write-host $_.Exception.Message; 
    write-host "Make sure Shell Launcher feature is enabled"
    exit
    }


# This well-known security identifier (SID) corresponds to the BUILTIN\Administrators group.

$Admins_SID = "S-1-5-32-544"

# Create a function to retrieve the SID for a user account on a machine.

function Get-UsernameSID($AccountName) {

    $NTUserObject = New-Object System.Security.Principal.NTAccount($AccountName)
    $NTUserSID = $NTUserObject.Translate([System.Security.Principal.SecurityIdentifier])

    return $NTUserSID.Value
    
}

# Get the SID for a user account named "KIOSK". Rename "KIOSK" to an existing account on your system to test this script.

$KIOSK_SID = Get-UsernameSID("KIOSK")

# Define actions to take when the shell program exits.

$restart_shell = 0
$restart_device = 1
$shutdown_device = 2

# Examples. You can change these examples to use the program that you want to use as the shell.

# This example sets the command prompt as the default shell, and restarts the device if the command prompt is closed. 

$ShellLauncherClass.SetDefaultShell("cmd.exe", $restart_device)

# Display the default shell to verify that it was added correctly.

$DefaultShellObject = $ShellLauncherClass.GetDefaultShell()

"`nDefault Shell is set to " + $DefaultShellObject.Shell + " and the default action is set to " + $DefaultShellObject.defaultaction

# Set Internet Explorer as the shell for "KIOSK", and restart the machine if Internet Explorer is closed.

$ShellLauncherClass.SetCustomShell($KIOSK_SID, "c:\program files\internet explorer\iexplore.exe www.microsoft.com", ($null), ($null), $restart_shell)

# Set Explorer as the shell for administrators.

$ShellLauncherClass.SetCustomShell($Admins_SID, "explorer.exe")

# View all the custom shells defined.

"`nCurrent settings for custom shells:"
Get-WmiObject -namespace $NAMESPACE -computer $COMPUTER -class WESL_UserSetting | Select Sid, Shell, DefaultAction

# Enable Shell Launcher

$ShellLauncherClass.SetEnabled($TRUE)

$IsShellLauncherEnabled = $ShellLauncherClass.IsEnabled()

"`nEnabled is set to " + $IsShellLauncherEnabled.Enabled

# Remove the new custom shells.

#$ShellLauncherClass.RemoveCustomShell($Admins_SID)

#$ShellLauncherClass.RemoveCustomShell($KIOSK_SID)

# Disable Shell Launcher

#$ShellLauncherClass.SetEnabled($FALSE)

#$IsShellLauncherEnabled = $ShellLauncherClass.IsEnabled()

#"`nEnabled is set to " + $IsShellLauncherEnabled.Enabled

 

管理員權限執行.ps1文件

編程好.ps1文件，使用管理員權限在'powerShell'上執行該文件，顯示如下結果表示成功。

 

用戶SID查詢

powerShell執行'wmic useraccount get name,sid'即可，如下。

 

 

重啟開機

重啟開機后，黑屏，只顯示唯一調用的程序界面。

相關連接

• https://docs.microsoft.com/zh-cn/windows/configuration/kiosk-shelllauncher
• https://stackoverflow.com/questions/33364908/how-to-run-an-application-as-shell-replacement-on-windows-10-enterprise
• https://github.com/microsoft/Windows-iotcore-samples/blob/develop/Samples/ShellLauncherV2/SampleConfigXmls/README.md