Android Enterprise kiosk blocks photo picker and Chrome from web appSolved

Participant
Discussion
4 weeks ago Sep 20, 2026

I’m using Android Enterprise multi-app kiosk with a web app. In one kiosk policy, users can upload photos from the web app without any issue. In another policy that looks almost identical, tapping the photo upload option does not open the photo picker.

After checking the device applications section, I can see entries like com.android.photopicker.MainActivity and Chrome’s launcher activity being blocked. Chrome already has permissions allowed in the policy, so I’m not sure if these should be added as required apps, background apps, or multi-app kiosk apps.

What is the correct way to allow photo picker access and make sure the web app opens in Chrome instead of Hexnode Kiosk Browser?

Replies (1)

Marked SolutionPending Review
Hexnode Expert
4 weeks ago Sep 18, 2026
Marked SolutionPending Review

Hi @cullen,

In Android Enterprise kiosk mode, any app, package, or system activity that is not explicitly allowed by the kiosk policy can be blocked. This includes system components such as the Android photo picker and secondary browser activities launched by a web app.

For photo upload from a kiosk web app, check the following:

  1. Allow the photo picker or gallery component
    • If the blocked package/activity appears as “com.android.photopicker.MainActivity”, add the relevant photo picker package to Hexnode first if it is not already listed.
    • Go to Apps > Add App > With Bundle ID and add the package shown by the device.
    • Then go to Policies > Kiosk Lockdown > Android Kiosk Lockdown > Background Apps and add it there.
  2. Allow Chrome correctly
    • If Chrome needs to open in the foreground, add Google Chrome to Multi-App Kiosk as an allowed app.
    • If Chrome is only needed silently in the background, add it under Background Apps instead.
    • An app cannot be configured as both a Multi-App Kiosk app and a Background App in the same policy. If it does not appear in the Background Apps list, check whether it is already selected under Multi-App Kiosk.
  3. Grant media/storage permissions
    • Go to Policies > Android > App Management > App Permissions.
    • Set the required storage/media permissions to Grant for the browser or web app handling the upload.
  4. Use package names, not activity names, where possible
    • The blocked list may show an activity such as “org.chromium.chrome.browser.document.ChromeLauncherActivity”.
    • For policy configuration, add the actual Chrome app/package as shown in Hexnode or the Play Store, rather than only the activity name.

Policy changes are pushed automatically after saving. Running Scan Device does not force a policy update, but it is useful for verifying whether the packages are still listed as blocked after the policy syncs.

Regards,
Sienna Carter
Hexnode UEM

Save