Overview
Classic-CoreImage Kiosk mode is one of the managed computing options that Michigan Medicine offers for Windows devices. Kiosk mode is designed primarily for clinically focused workflows, and uses Imprivata OneSign for secure, single sign-on access.
Kiosk Mode Features
- A Michigan Medicine email (uniqname@med.umich.edu) is required to log in (i.e., unlock the screen).
- It is typically deployed in areas that require fast logins for short periods of use.
- Logins unlock the screen to a shared desktop session using a service account called Kiosk-User.
- The shared desktop session is secure and has functional limitations.
- Preconfigured with an auto-logoff timer that refreshes the shared desktop session.
- GreenIT is enabled by default.
- Maintenance will automatically run daily.
- Patches and other updates require reboots, most of which are initiated via Maintenance.
- Laptops do not go into standby, even when on battery.
Login Screen
Start Menu and Taskbar
The lock icon on the taskbar locks the screen requiring a badge-tap or username/password to unlock it. If the same person unlocks the screen before the auto logoff timer expires, they are returned to where they left off. If a different user unlocks the screen, Edge and Chrome are typically closed and the MiChart session changes to reflect the different user.
The yellow-X on the taskbar, locks the screen, signs the user out of MiChart, and closes open applications.
The red-X (Workstation Cleanup) in the start menu will sign the Kiosk-user account (not just the user) out of Windows, thereby closing all open applications. Kiosk-user will automatically sign back in, and the user will be presented with the Imprivata login screen above. The red-X isn't often needed. It can be used as a troubleshooting step to try before resorting to a reboot to fix any oddities in behavior that persist after trying the yellow-X.
Desktop