What do you mean by "built-in link for user to access unauthorized apps"?

Let's say for example I've used adobe pdf reader, inside that app you can see button like "share to messenger, viber, gmail, etc"

Have you tried "Application Run Control" in the profile?

You can ban the "unauthorized apps" from there.

Hi Wayne, thanks for sharing your thoughts. Yes, I also consider that option before but that would be tedious to identify all apps that can cause bypass of kiosk. But that can be our last option/worst case scenario.

As feature control to disallow sharing link is unavailable for most brands,  application control is the general approach to solve problems like yours.   Use whitelist in ARC payload to allow the few apps that might need to be called by apps item on the kiosk.  This list is usually much shorter and thus less tedious to build, and is also more secure for COSU use case as apps not on the whitelist cannot be run if it is a bundled/installed app, and cannot be successfully installed if not yet installed.

Another approach is to look for other simpler pdf viewers that provide fewer or even no "links" to other apps.

where are you pulling the PDF from? is it coming from an email? or a website? for email, throw the email app on the kiosk along with a PDF reader. you should be able to open it in the email and then it will download to your PDF reader. if your PDF is on a browser you can do the same process. try downloading the free version of Adobe acrobat.

Hi Benedict,

I was solving very similar problem in kiosk mode and tried a lot of PDF apps. I installed it via Packages into the devices. The best apps (for our specific case) was for me Google PDF reader (with minimal UI access)

Hope it will help you.