Kiosk mode (Assigned access)

The Kiosk mode with assigned access settings configures a kiosk system with separate user accounts that can lock down a device to access only a single app or multiple Windows apps.

Table 1. Kiosk mode with assigned access settings
Policy setting Description Supported devices
Enable Kiosk mode (assigned access) Choose whether to allow kiosk mode with assigned access settings. Windows 10+ Pro, Education, Enterprise
Configure Kiosk mode
Single app Kiosk
Assign one app to a user device. For more information, see https://docs.microsoft.com/en-us/windows/configuration/kiosk-single-app.
Important: Currently, Single app Kiosk is only supported on Windows 11. Microsoft Edge is not yet a supported Universal Windows app.
  • App ID for universal Windows app
    Enter the application ID for a universal Windows app. Package Family name must be used as the App ID. For more information about obtaining the app ID for universal Windows app, see Using the Windows App Management Admin Tool to obtain Windows app IDs.
  • Domain name for Kiosk user
    Specify a domain name or use %domain% if a device is connected to a domain. Leave the input field blank if the device is not connected to a domain.
  • Username for Kiosk user
    Specify the username for the kiosk user. Use %username% for the enrollment user.
  • Set device to Kiosk mode
    Sets the device in kiosk mode. Choose from the options such as set the device immediately as kiosk or after a kiosk app is installed on the device.
 Windows 10+ Pro, Education, Enterprise
Multi-app Kiosk (recommended)
Assign one or more apps to a user device. Administrators can assign up to 10 apps in a single group. Administrators can also apply the same kiosk profile to multiple users on the device. For more information, see https://docs.microsoft.com/en-us/windows/configuration/lock-down-windows-10-to-specific-apps.
Important: Currently, Multi-app Kiosk is only supported on Windows 10. It is not supported on Windows 11.
  • App type
    Select the type of apps that you want to run in kiosk mode.
    • Universal Windows Platform (UWP)
    • Win32 (Windows desktop applications)
    • Win32 shortcut
  • App ID
    Enter the application ID for a universal Windows app. Package Family name must be used as the App ID. For more information about obtaining the app ID for universal Windows app, see Using the Windows App Management Admin Tool to obtain Windows app IDs.
  • Absolute path of app
    (Win32 and Win32 shortcut only): Enter the path or file name for the app. If the file path is in the PATH environment variable, then you can use the file name. For a list of accepted environment variables, see Environment variables supported by the Application Compliance policy settings.
  • App shortcut path
    (Win32 shortcut only): Enter the shortcut to the full path for the app. The shortcut must be listed under %ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\.
  • Show taskbar
    Specify whether you want the Windows taskbar that is displayed on the user device.
  • Username for Kiosk user
    Specify the username for the kiosk user. Use %username% for the enrollment user.
 Windows 10+ Pro, Education, Enterprise