Others

How to Configure Intune Shared Devices for Frontline Workers

Ayan Masood Oct 10, 2026 870 views

Question details

An administrator is looking for the most appropriate Microsoft Intune configuration strategy for frontline workers using shared computers with individual user credentials.

How to Configure Intune Shared Devices for Frontline Workers

Product: Microsoft Intune
Device & OS: Windows
Scenario: Migrating from on-premises domain-joined computers to cloud-based Intune management, differentiating between dedicated laptops for knowledge workers and shared hardware for frontline staff.
Observed behavior: Frontline workers need to successfully log into shared Windows devices using their individual Microsoft Entra ID credentials securely and efficiently.

Before you start

Ensure you have Microsoft Intune Administrator privileges and that your frontline devices are enrolled in Intune or prepared for Windows Autopilot self-deploying mode.

Solution 1Recommended

Set Up Windows Shared PC Configuration

This is the recommended setup for general multi-user access where frontline workers sign in with individual credentials without needing restrictive application lock-downs.

The Shared PC configuration optimizes Windows devices for shared use. It automatically manages local profile storage, removes inactive accounts to save disk space, and disables unnecessary first-run animations to speed up login times for frontline workers.

Access Intune Configuration Profiles

Sign in to the Microsoft Intune admin center. Navigate to Devices > Configuration profiles and click on 'Create profile'.

Select the Shared Multi-User Template

Choose 'Windows 10 and later' as the platform, select 'Templates' as the profile type, and select 'Shared multi-user device'.

Configure Account Management Options

In the configuration settings, enable 'Shared PC mode'. Configure 'Account management' to dictate how and when old user profiles are automatically deleted (e.g., at a specific storage threshold).

Assign to Frontline Devices

Save the profile and assign it to the Entra ID group containing your frontline worker shared devices.

Storage Optimization: Configuring automatic account deletion is crucial to prevent shared device hard drives from filling up with cached user profiles over time.

Solution 2

Configure Multi-App Kiosk Mode

Deploy multi-app kiosk mode when frontline workers must be restricted to a strictly defined set of applications for security or focus.

Free Microsoft Office alternative

Equip Shared Frontline Devices with WPS Office

Provide your frontline workers with powerful document processing capabilities. WPS Office is a lightweight, highly compatible alternative to Microsoft Office that is easy to deploy via Intune to shared device fleets without incurring expensive per-device or per-user licensing costs.

1. Download the Installer: Obtain the latest WPS Office deployment package tailored for enterprise environments.
2. Package for Intune: Wrap the installer using the Microsoft Win32 Content Prep Tool to create an .intunewin file.
3. Deploy as Win32 App: Upload the file to Microsoft Intune and assign it as a required application to your frontline worker shared device groups.

Seamlessly compatible with Microsoft Word, Excel, and PowerPoint formatsLightweight installation preserves critical storage space on shared frontline PCsFamiliar and intuitive UI requires minimal training for shifting workersCost-effective solution to equip large numbers of shared devices

microsoft office alternative - wps office

Frequently Asked Questions

Can I use Windows Autopilot for shared Intune devices?

Yes, Windows Autopilot self-deploying mode is commonly used to provision shared devices. It joins the device to Microsoft Entra ID and enrolls it in Intune automatically without requiring user interaction during the initial setup.

What happens to user data on a Shared PC in Intune?

When using the Shared PC configuration profile, administrators can configure policies to automatically delete local user profiles at sign-out or when the local storage space reaches a predefined threshold, ensuring data privacy and disk space availability.

Are guest accounts allowed on Intune shared devices?

Yes, within the Shared multi-user device configuration profile, administrators have the option to enable or disable guest account sign-in, depending on organizational security requirements.

How does licensing work for frontline workers on shared Intune PCs?

Frontline workers typically use Microsoft 365 F-series licenses (like F1 or F3), which are specifically designed for shared device scenarios. These licenses provide the necessary Microsoft Entra ID authentication and Intune management capabilities required to sign into shared hardware.

Office Quick Solutions