How to Prevent Users from Signing Out of SharePoint Online on Shared Computers
Question details
The user needs a way to maintain an active SharePoint Online session on shared hallway computers without exposing personal accounts to security risks or allowing users to manually sign out.
- Product
- SharePoint Online
- Device & OS
- not provided
- Scenario
- Displaying SharePoint Online dashboards or intranet pages on shared, unattended hallway computers.
- Observed behavior
- Users deliberately or unintentionally click the sign-out button, disrupting the display. Using a permanently signed-in personal account to fix this creates significant security vulnerabilities.
Before altering session policies or setting up shared devices, consult your IT security administrator to ensure compliance with your organization's device management and identity protection guidelines.
Configure Kiosk Mode or Managed Browser Policies
The most secure and reliable way to display SharePoint on a shared computer without sign-out disruptions is by locking the device into Kiosk mode.
Microsoft does not natively support disabling the sign-out button in SharePoint Online due to strict security architectures. Attempting to hide it with unsupported code can fail during updates.
Instead, utilizing operating system-level Kiosk mode restricts the user interface. It locks the display to a specific browser running in full-screen mode, preventing users from interacting with account settings, address bars, or the sign-out button.
On your Windows shared device, navigate to Settings > Accounts > Family & other users, and click 'Set up a kiosk'.
Assign Microsoft Edge as the dedicated kiosk application and configure it to run in 'Digital Signage' or 'Public Browsing' mode.
Input your specific SharePoint Online dashboard URL as the default startup page so the device automatically launches into full-screen mode without exposing navigation controls.
Utilize Dedicated Service Accounts with Entra ID SSO
Never use personal credentials on a shared device. Instead, provision a dedicated, restricted account specifically for digital signage paired with Single Sign-On.
Looking for a Secure and Lightweight Office Suite? Try WPS Office
While managing enterprise cloud sessions requires complex IT configurations, your everyday document editing should be simple and secure. WPS Office provides a lightweight, highly compatible alternative to Microsoft Office for creating, editing, and managing your local documents.
- 1. Download WPS Office: Visit the official WPS Office website and download the free installer for your operating system.
- 2. Install the application: Run the setup file and follow the straightforward on-screen instructions to complete the installation.
- 3. Open your files: Launch WPS Office and immediately open your existing Microsoft Office files without losing any formatting.
Frequently Asked Questions
Can I hide the suite bar in SharePoint Online to prevent users from clicking sign out?
Natively hiding the Microsoft 365 suite header for all users is restricted by Microsoft for security and navigation reasons. While developers can use SharePoint Framework (SPFx) to customize modern page layouts, using Kiosk mode on the specific physical computer is the recommended and most secure approach for digital signage.
Is the 'Keep me signed in' option safe to use on shared hallway computers?
No. Using 'Keep me signed in' with a standard personal account on an unsecured shared device is a critical security vulnerability. It should only be used on trusted, single-user devices, or when combined with a highly restricted, read-only display account approved by IT security.
How can I prevent the SharePoint dashboard from timing out and forcing a sign-out?
IT administrators can adjust session lifetime policies within Microsoft Entra ID Conditional Access. For dedicated digital signage accounts, admins can configure non-interactive sign-in frequencies to ensure the dashboard remains authenticated and does not time out during operational hours.
