Android kiosk shows Access Denied when opening WhatsApp JPEG imagesSolved

Hi @matteo,

This usually happens when the main app is allowed in Android kiosk, but one of the supporting packages required to complete the action is still blocked.

For example, WhatsApp may be allowed and may have the required Android permissions, but opening a JPEG can trigger another package such as a gallery app, file viewer, media picker, browser, or another system component. If that package is not allowed in the kiosk policy, the device can show “Access Denied” or briefly open the file and close it.

Try the following:

1. Reproduce the issue on the Android device.
2. From the Hexnode portal, go to Manage and select the affected device.
3. Run the Scan Device action.
4. After the scan completes, open the device’s Applications sub-tab.
5. Check the Blocked Packages list.
6. Identify the blocked package that appears around the time the JPEG or link failed to open.
7. Go to Apps > Add Apps > With Bundle ID.
8. Add the blocked package name as a bundle ID and save it.
9. Open the kiosk policy applied to the device.
10. Go to Android Kiosk Lockdown > Background Apps.
11. Add the same package from Local Apps.
12. Save the policy and confirm that the policy association is successful from Action History.
13. Test opening the WhatsApp JPEG again.

If the app needs to be visible to the user, add it to the Multi-App Kiosk list. If it only needs to run in the background to support another action, adding it as a Background App is usually enough.

For web links, the same rule applies. If the link opens through a browser or web component, that package must also be permitted either as a Kiosk App or as a Background App, depending on whether users need to interact with it directly.

Best Regards,
Isabel Lora
Hexnode UEM

I checked the blocked packages list and there are several entries. Should I add all of them, or only the one related to WhatsApp?

Do not add all blocked packages unless you are sure they are required. Reproduce the issue once, note the approximate time, run Scan Device, and then check which package was blocked at that time.

Best Regards,
Isabel Lora
Hexnode UEM