Set Up Windows 10/11 Kiosk Mode (Assigned Access) for a Single-App PC

Set Up Windows 10/11 Kioskiosk Mode (Assigned Access) for a Single-App PC​

Difficulty: Intermediate | Time Required: 20 minutes
Windows “Kiosk mode” (also called Assigned access) is designed for PCs that should run one app and nothing else—perfect for reception check-in stations, digital signage, point-of-sale terminals, library catalog PCs, or a family “single-purpose” device. When configured correctly, kiosk mode reduces distractions, limits accidental changes, and can significantly improve security by preventing access to the desktop, Start menu, and other apps.
This tutorial walks you through setting up single-app kiosk mode on Windows 10 and Windows 11 using the built-in Settings app, plus optional policies and troubleshooting for common issues.

---

Prerequisites​

Before you start, make sure you have:

• Windows 10 or Windows 11 (Assigned access is built-in)
  • Windows 11: Settings layout differs slightly, but features are similar
  • Windows 10: Steps apply to 1809+ and later; older builds may look different
• Administrator access on the PC
• The app you want to run in kiosk mode:
  • Recommended: a Microsoft Store/UWP app (most reliable for kiosk mode)
  • Possible: some classic desktop apps (Win32) depending on Windows edition and app support; availability varies by build/edition
• A plan for the kiosk account:
  • Usually a local standard user dedicated to kiosk use

Note: If this is for a public-facing kiosk, strongly consider using a dedicated PC or a locked-down OU/device management approach (Intune/Group Policy), and keep the kiosk device physically secured.

---

Step-by-Step: Configure Single-App Kiosk Mode (Assigned Access)​

Step 1) Install and test the kiosk app (important)​

1. Sign in with your normal admin account.
2. Install the app (Microsoft Store app or your chosen application).
3. Launch it once and confirm it works without first-run prompts that require admin approval.

Tip: If the app requires initial sign-in (e.g., browser profile, tenant sign-in), do that now while you still have full access.

---

Step 2) Create a dedicated kiosk user account​

You can let Windows create the kiosk account automatically during setup, but it’s often cleaner to create it yourself.
Windows 11

1. Go to Settings → Accounts → Other users.
2. Under Other users, select Add account.
3. Choose I don’t have this person’s sign-in information → Add a user without a Microsoft account.
4. Create a local user (example: KioskUser) with a simple name.
5. Ensure it’s a Standard user (not Administrator).

Windows 10

1. Go to Settings → Accounts → Family & other users.
2. Under Other users, select Add someone else to this PC.
3. Choose I don’t have this person’s sign-in information → Add a user without a Microsoft account.
4. Create the local user and keep it Standard.

Warning: Don’t use an admin account for kiosk mode. If the kiosk app is compromised, admin rights make the impact much worse.

---

Step 3) Start the kiosk (Assigned access) setup​

Windows 11

1. Open Settings → Accounts → Other users.
2. Find Kiosk (or “Set up a kiosk”), then select Get started.

Windows 10

1. Open Settings → Accounts → Family & other users.
2. Scroll to Set up a kiosk and select Assigned access.
3. Click Get started.

---

Step 4) Choose (or create) the kiosk account​

1. When prompted, select the user you created (e.g., KioskUser).
2. If you didn’t create one, you can choose Create a new account and let Windows generate it.

---

Step 5) Select the kiosk app (single-app mode)​

1. Choose the app you want to run.
   • Common examples:
     • Microsoft Edge for a browser-based kiosk
     • A line-of-business Store app
     • A signage or check-in app
2. Confirm the selection.

If you choose Microsoft Edge (common scenario):

• You’ll often be prompted for additional options such as:
  • Kiosk type / mode: typically a locked-down browsing experience
  • Homepage URL: your check-in page or internal portal
  • Session behavior: whether to clear data on restart / idle timeout

Tip: For kiosks that must always display a specific website, Edge kiosk configuration is often the simplest and most stable.

---

Step 6) Apply settings and sign into the kiosk account to test​

1. Finish the wizard and close Settings.
2. Sign out of your admin account:
   • Start menu → your profile → Sign out
3. Sign in as the kiosk user (KioskUser).
4. The kiosk app should launch automatically, and the system should prevent normal desktop access.

What “success” looks like: the kiosk app starts immediately, and typical navigation paths (Start menu, Taskbar access, launching other apps) are restricted.

---

Step 7) Confirm you can still manage the PC (admin exit strategy)​

You’ll need a safe way to get back to admin mode for updates and maintenance.

1. On the kiosk PC, try using Ctrl + Alt + Del:
   • Many kiosk configurations allow access to a limited security screen.
2. Use Switch user (if available) to return to your admin account.
3. If Ctrl+Alt+Del is restricted in your scenario, plan a management method:
   • Remote management (RDP/Quick Assist) from a trusted admin machine
   • Physical keyboard shortcut procedures (varies by configuration)

Warning: Don’t deploy to a remote site until you’ve tested how you will regain admin access reliably.

---

Tips, Best Practices, and Troubleshooting​

Keep the kiosk stable and secure​

• Use a dedicated local standard user for kiosk mode (never reuse daily accounts).
• Enable automatic updates (but schedule maintenance windows if downtime matters).
• Consider turning on:
  • BitLocker (especially for public locations)
  • Auto-logon only if appropriate for your security model (often used for unattended kiosks, but evaluate risk)

Note: Auto-logon isn’t required for Assigned access, but many kiosk deployments pair it with kiosk accounts so the system returns to kiosk app automatically after power loss/reboot.

---

Common issue: “My app isn’t listed”​

This usually happens if the app doesn’t support Assigned access in your Windows build/edition, or if it’s not a supported app type.
Try:

1. Confirm the app is installed for the kiosk user (some apps install per-user).
2. If it’s a Store app, open it once under the kiosk user (temporarily sign in normally, if possible) and then re-check.
3. If you need a classic desktop app, verify your Windows edition/build supports it for Assigned access.

---

Common issue: Edge kiosk shows the wrong page or allows too much navigation​

• Re-check the Edge kiosk setup options (homepage URL, session timeout, allowed features).
• If the kiosk is meant to show a single web app:
  • Use a direct URL to the web app page
  • Configure session reset/timeout so it returns to the start screen after inactivity

---

Common issue: Kiosk user gets stuck or app crashes​

1. Sign back in as admin and test the app under normal conditions.
2. Check Event Viewer:
   • Windows Logs → Application for app errors
3. Update the app and Windows.
4. If the app requires network access, confirm:
   • Wi‑Fi/Ethernet is stable
   • Proxy/captive portal isn’t blocking first launch

Tip: Kiosks often fail due to “first run” prompts (license prompts, welcome screens, permission dialogs). Eliminate these during initial setup.

---

How to disable kiosk mode later​

If you need to remove Assigned access:
Windows 11

1. Settings → Accounts → Other users
2. Under Kiosk, select the kiosk configuration
3. Remove/disable the kiosk setup

Windows 10

1. Settings → Accounts → Family & other users
2. Set up a kiosk / Assigned access
3. Select the kiosk account and remove the configuration

---

Conclusion​

Assigned access (single-app kiosk mode) is one of the easiest ways to turn a Windows 10/11 PC into a reliable single-purpose device. With a dedicated kiosk user account and a supported app (often Microsoft Edge for web kiosks), you can dramatically reduce accidental tampering, simplify the user experience, and improve security—all using built-in Windows features.
Key Takeaways:

• Kiosk mode (Assigned access) locks a PC to one app, ideal for public/shared devices.
• Use a dedicated standard local user for kiosk operation, not an admin account.
• Test first-run app behavior, admin exit strategy, and updates before deploying.
• Microsoft Edge is a popular kiosk choice for web-based check-in/signage scenarios.

---

This tutorial was generated to help WindowsForum.com users get the most out of their Windows experience.