Kiosk mode (Assigned access)

The Kiosk mode with assigned access settings configure a kiosk system with separate user accounts that can lock down a device to accessing only a single app or multiple Windows apps.

Table 1. Kiosk mode with assigned access settings
Policy setting Description Supported devices
Enable Kiosk mode (assigned access) Choose whether to allow kiosk mode with assigned access settings. Windows 10+ Pro, Education, Enterprise
Configure Kiosk mode Single app Kiosk: Assign one app to an end-user device. For more information, see https://docs.microsoft.com/en-us/windows/configuration/kiosk-single-app.
  • App ID for universal Windows app: Enter the application ID for a universal Windows app. For more information about obtaining the app ID for universal Windows app, see Using the Windows App Management Admin Tool to obtain Windows app IDs.
  • Domain name for Kiosk user: Specify a domain name or use %domain% if a device is connected to a domain. Leave the input field blank if the device is not connected to a domain.
  • Username for Kiosk user: Specify the user name for the kiosk user. Use %username% for the enrollment user.
  • Set device to Kiosk mode: Sets the device in kiosk mode. Choose from the options such as set the device immediately as kiosk or after a kiosk app is installed on the device.
Windows 10+ Pro, Education, Enterprise
Multi-app Kiosk (recommended): Assign one or more apps to an end-user device. Administrators can assign up to 10 apps in a single group. Administrators can also apply the same kiosk profile to multiple users on the device. For more information, see https://docs.microsoft.com/en-us/windows/configuration/lock-down-windows-10-to-specific-apps.
Important: Currently, Multi-app Kiosk is only supported on Windows 10. It's not supported on Windows 11.
  • App type: Select the type of apps that you want to run in kiosk mode:
    • Universal Windows Platform (UWP)
    • Win32 (Windows desktop applications)
    • Win32 shortcut
  • App ID: Enter the application ID for a universal Windows app. For more information about obtaining the app ID for universal Windows app, see Using the Windows App Management Admin Tool to obtain Windows app IDs.
  • Absolute path of app (Win32 and Win32 shortcut only): Enter the path or filename for the app. If the file path is in the PATH environment variable, then you can use the filename. For a list of accepted environment variables, see Environment variables supported by the Application Compliance policy settings.
  • App shortcut path (Win32 shortcut only): Enter the shortcut to the full path for the app. The shortcut must be listed under %ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\.
  • Show taskbar: Specify whether you want the Windows taskbar displayed on the end-user device.
  • Username for Kiosk user: Specify the username for the kiosk user. Use %username% for the enrollment user.
Windows 10+ Pro, Education, Enterprise