(Optional) Configure app-specific settings – some apps allow custom URL or timeout values.
Test: Sign out and sign in as the kiosk account. The chosen app launches full-screen. To exit kiosk mode temporarily: Press Ctrl + Alt + Del → Sign out (requires admin password to return to desktop). Method 2: Multi-App Kiosk (via XML + PowerShell / Intune) More complex but flexible. Requires Windows Enterprise/Education. windows kiosk mode
Get-WmiObject -Class Win32_UserProfile | Where-Object $_.LocalPath -like "*kioskuser" | Remove-WmiObject Set-AssignedAccess -Remove Need single, locked-down full-screen app? → Yes → Single-app kiosk (Settings) → No, need multiple apps? → Windows Enterprise? → Yes → Multi-app kiosk via XML + Intune → No → Upgrade edition or use Edge kiosk as workaround For most simple public kiosks, Method 1 (single-app) is enough. For corporate fleets, use Method 4 (Intune) to manage updates, policies, and multiple devices at scale. To exit kiosk mode temporarily: Press Ctrl +
<?xml version="1.0" encoding="utf-8"?> <AssignedAccessConfiguration xmlns="http://schemas.microsoft.com/AssignedAccess/2017/config"> <Profiles> <Profile Id="MultiAppKiosk"> <AllAppsList> <AllowedApps> <App DesktopAppPath="C:\Program Files\MyApp\app.exe" /> <UWP AppUserModelId="Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge" /> </AllowedApps> </AllAppsList> <StartLayout> <![CDATA[<LayoutModificationTemplate xmlns:defaultlayout="..." ...>]]> </StartLayout> </Profile> </Profiles> <Configs> <Config> <Account>kioskuser@domain.com</Account> <DefaultProfile>MultiAppKiosk</DefaultProfile> </Config> </Configs> </AssignedAccessConfiguration> Apply with PowerShell (local): Get-WmiObject -Class Win32_UserProfile | Where-Object $_
