What is Windows Kiosk Mode? How to Set up Kiosk Mode on Windows 10 and Windows 11 Devices

With a market share of 73.31%, Windows remains the leading desktop operating system worldwide^[1]. Both small to medium businesses and large enterprises are increasingly choosing Windows 10 and Windows 11 devices to meet their work needs. As organizations strive to enhance security, streamline operations, and improve user experiences, the importance of Windows kiosk mode is evident.

Organizations can create a focused work environment by deploying Windows devices in kiosk mode to enhance their productivity and security. Kiosk mode restricts access to specific applications, websites, and settings, allowing businesses to deploy Windows devices in a secure manner. This setup enables users to concentrate on essential tasks without distractions or prevents the risks associated with unauthorized access.

This blog provides an overview of kiosk mode for Windows and a step-by-step guide for setting up single-app kiosk mode for Windows 10 and Windows 11, helping your organization maximize the advantages of this powerful feature.

What is Windows Kiosk Mode?

Kiosk mode (also known as assigned access) on Windows 10 and Windows 11 devices is a security feature that allows you to run only specific or multiple applications and settings, providing users with a locked-down experience on a device. This is useful when devices are in public places and business environments, such as self-service kiosks, POS, digital signage, and retail checkouts.

In Windows Kiosk Mode, the device boots directly into the designated app, and the user is prevented from accessing the desktop, start menu, or other system features. This helps ensure the device is used only for its intended purpose, improving security and simplifying the user experience.

Types of Windows Kiosk Mode

Windows kiosk mode, designed to restrict device functionality to a single application or a limited set of applications, offers two primary configurations:

• Single-App Kiosk Mode: The device runs just one app (e.g., a web browser or a custom business app) in full-screen mode. The user can’t exit the app or access anything else on the system without administrative credentials.
  
  • This mode locks the device to a single Universal Windows Platform (UWP) app or a Win32 app.
  • It’s ideal for dedicated devices like digital signage, point-of-sale systems, or information kiosks where only one function is needed.
• Multi-App Kiosk Mode:
  • This mode allows users to access a curated set of applications, accessible through a customized Start menu.
  • It’s suitable for scenarios where a limited range of applications is required, such as in libraries, testing centers, or shared workstations.

You can configure it through settings like “Assigned Access” in Windows via MDM (Mobile Device Management) solution like Scalefusion. It’s commonly used in places like libraries, retail stores, or schools where devices need to serve a focused function without giving users full system control.

How to Set up Kiosk Mode in Windows 10 and Windows 11 Devices Using Scalefusion UEM?

Scalefusion UEM offers an intuitive, unified dashboard to control all device management functions, including enabling and disabling kiosk mode for Windows 10 and Windows 11.

Once a particular device is enrolled, IT admins can go to the Scalefusion dashboard, where they can easily set up kiosk mode on the required devices by creating a profile. They can also push, control, and alter the content to be displayed and be on top of which apps and browsers to run on kiosks.

Interactive Demo for Enabling Kiosk Mode on Windows Devices

Step-by-step guide to set up single-app kiosk mode:

Step 1: Navigate to Device Profiles & Policies > Devices Profiles

Step 2: Click Create New Profile on the upper right corner of the screen

Step 3: Select the Windows tab; Enter a profile name; Click Submit

Step 4: Now, under ‘Select Apps‘ (on left menu), choose ‘Multi-app Kiosk Mode‘ option.

a) Configure policy mode by selecting ‘Windows MDM CSP‘ option.

b) Add user info – Configure the user info

c) Select apps – Select the apps to enable multi-app kiosk mode

Step 5: Click ‘Create Profile‘ on the upper right corner of the screen to finish

Step 6: Click ‘Apply‘ to push the multi-app kiosk profile to device groups/user groups/individual devices

Lock your device to a single application for streamlined use and security. Follow this simple guide to set up Kiosk Mode on your Windows 10 and Windows 11 machine.

How to Configure Single-App Kiosk Mode on Windows 10 and Windows 11

How to Configure Multi-App Kiosk Mode on Windows 10 and Windows 11

Pre-requisites for Enabling Kiosk Mode on Windows 10 and Windows 11 devices

Before setting up single-app kiosk mode, it’s essential to understand the types of Windows applications:

Application Requirements

• System administrators must have complete clarity of the type of application that will be running on the system, whether it is a UWP or a Win32 application.
• The device must have at least one Windows device where the device application is installed to create the device profile.
• Only Browser or Win32 applications can be set in Single app/kiosk mode for Windows Home (10 & 11) devices.

Universal Windows Platform (UWP) Apps:

• These are modern applications built to run on any Windows OS/platform.
• They are pre-installed with Windows 10 or from the Windows 10 Store.
• For setting up UWP applications, you would require the application ID of the UWP app.

Win32 Applications:

• These are traditional Windows applications installed via an installer package with a “.exe” file.
• For setting up Win32 applications, the installation path of the “.exe” file needs to be copied post-installation for use with Scalefusion.

Windows OS Requirements:

• Following are the operating systems that would be most suitable for running Kiosk modes: Windows OS 10, 11, as well as 32-bit and 64-bit operating systems.

How to Set up Windows 10 Kiosk Mode & Windows 11 Kiosk Mode Manually Using Windows Assigned Access

Windows Assigned Access is a feature in Windows operating systems that allows administrators to restrict a device to running a single application. To configure kiosk mode on Windows 10 devices, follow these steps:

To configure kiosk mode on a Windows device, follow these steps:

Step 1: Begin by creating a local standard user account using an Administrator account.
Step 2: Open the Settings app by pressing the Windows Key + I combination.
Step 3: Navigate to Accounts > Other Users and then select Set up assigned access.
Step 4: Choose the Standard user account you created in Step 1 by selecting Choose an Account.
Step 5: Next, click Choose an App and pick the app you want to restrict access to from the list of supported applications for single-app kiosk mode (also called assigned access).
Step 6: Restart the device and sign in with the Standard user account credentials to activate kiosk mode.

While Windows Assigned Access provides a simple way to configure kiosk mode, it has notable limitations. It only supports a single app at a time, which can be restrictive for more complex use cases. Additionally, it lacks the advanced security features and customization options often required for larger deployments. For organizations with more demanding needs, it is advisable to utilize comprehensive Unified Endpoint Management (UEM) solutions like Scalefusion UEM.

Drawbacks of Windows Assigned Access for Windows 10 & Windows 11

Windows’ Assigned Access, also known as Single App Mode, allows a device to run only one specific app, turning it into a kiosk. While this feature is built-in and free, it has some limitations compared to using specialized kiosk software:​

1. Limited to One App

Assigned Access restricts the device to a single Universal Windows Platform (UWP) app from the Microsoft Store. This means traditional desktop applications (Win32 apps) can’t be used in this mode, limiting flexibility. ​

2. Manual App Installation Required

Before setting up Assigned Access, the chosen app must be manually installed on each device. This can be time-consuming, especially when managing many devices. In contrast, many third-party kiosk software solutions allow remote installation and updates of applications, streamlining device management.

3. Complex Setup for Multiple Apps

Configuring Assigned Access to run multiple apps isn’t straightforward and often requires creating custom XML files, which can be complicated and prone to errors. Dedicated kiosk software like Scalefusion typically offers more user-friendly interfaces for setting up multi-app environments. ​

4. Limited Customization and User Experience

Assigned Access offers minimal customization options for the user interface, potentially leading to a less engaging user experience. Dedicated kiosk software solutions often provide extensive customization features, allowing organizations to tailor the interface to their branding and user needs.

Windows Kiosk Software vs. Microsoft Windows Assigned Access

kiosk mode offered by Scalefusion UEM provides organizations with advanced capabilities, while Microsoft Windows Assigned Access offers a more basic implementation. Organizations should consider an optimum method of applying kiosk mode to their Windows 10 and Windows 11 devices that best meets their needs.

Aspect	Scalefusion’s Windows kiosk software	Windows Assigned Access
Purpose	To provide comprehensive control over Windows devices with customizable settings, multi-app support, and remote management.	To restrict a device to a single application for simplicity.
Features	Supports multiple apps, remote monitoring, advanced customization, and device management.	Limited to single-app mode, with basic restrictions.
Security	Enhanced security with advanced policies, remote control, and compliance management.	Basic security, limited to local settings and access restrictions.
Ease of Setup	Quick and centralized setup through a user-friendly interface with remote deployment options.	Simple, but manual and limited to local settings.
Configuration	Highly configurable with options for multiple apps, kiosk browser, and custom branding.	Minimal configuration, restricted to a single app selection.
Use Cases	Suitable for diverse industries like retail, healthcare, education, and enterprises needing multi-app or custom environments.	Ideal for basic setups like kiosks displaying one app or a single-purpose device.

Benefits of Kiosk Mode for Windows Devices

Implementing kiosk mode on Windows 10 and Windows 11 devices offers you a range of benefits:

1. Ensured Security

Kiosk mode ensures Windows 10 and Windows 11 device security, allowing you to deploy them in public-facing environments. It secures point-of-sale systems, public access terminals, and other devices that need to be protected from unauthorized access.

Similarly, you can restrict users’ access to specific applications, websites, or device settings. This minimizes the risk of exposure to sensitive information while maintaining compliance with industry regulations such as HIPAA and GDPR.

2. User Productivity

In business environments, kiosk mode can significantly enhance user productivity by offering streamlined access to essential tools and applications, eliminating the need to navigate the full Windows 10 and Windows 11 desktop.

This focused approach allows users to quickly engage with the specific applications they require, minimizing distractions and reducing the time spent on unnecessary tasks. As a result, employees can work more efficiently, leading to improved performance and a more productive workplace.

3. Increased Operational Efficiency

Applying kiosk mode to Windows devices increases efficiency by restricting access to specific applications or websites. Users can quickly navigate tasks without the confusion of unrelated options. This focused environment accelerates workflow, ensuring that users can complete their tasks with efficiency and consume less time.

Moreover, as you restrict access to the Windows desktop and other system settings, there is less chance of users unintentionally making changes or causing system errors. This reduces the need for device maintenance and troubleshooting.

4. Enhanced Customer Service

Deploying Windows 10 and Windows 11 devices in kiosk mode offers customers a smooth and focused user experience based on their needs. For instance, in a retail setting, kiosks can facilitate a self-service shopping experience, allowing customers to browse products and make purchases independently, without staff assistance.

With access to dedicated applications or websites, users can interact directly with the applications they need, free from distractions. This enhances customer engagement and streamlines the purchasing process.

5. Versatility

Single-app kiosk mode for Windows is adaptable and applicable across various industries and settings. It is commonly utilized in retail for self-service kiosks, in museums for interactive displays, and in enterprises for dedicated task-specific workstations.

Get Scalefusion UEM to Configure Windows Kiosk Mode on Windows 10 and 11

Scalefusion UEM’s kiosk mode for Windows offers a robust solution to the limitations of traditional Windows Assigned Access. It provides enhanced security, advanced customization, and multi-app support, making it ideal for businesses needing versatile, secure, and scalable device management.

With centralized control and the ability to configure Windows devices remotely, Scalefusion UEM is perfect for a variety of industries—from retail to education—ensuring that your public-facing and dedicated devices are secure and optimized.

Frequently Asked Questions (FAQs)

What are the industries that can benefit from Windows kiosk lockdown mode? 

Windows kiosk mode enhances various industries by providing self-service solutions that improve customer experiences and reduce staff involvement.

• Retail: Enables a self-service shopping experience.
• Hospitality: Facilitates seamless guest check-in and check-out.
• Healthcare: Allows patients to access medical records and schedule appointments independently.
• Transportation: Offers self-service check-in and boarding pass printing for travelers.

How to configure user-specific profiles in kiosk mode on Windows 10 and 11?

In Windows 10 and 11, kiosk mode can be set up with user-specific configurations, allowing different profiles to be managed separately within the same device. To achieve this, you need to assign a specific user account to the Kiosk configuration, ensuring that the personalized settings, apps, and restrictions apply to individual users. This method enhances security and customization, enabling multiple users to have distinct kiosk experiences on a shared device.

What are the use cases of Windows 10 and Windows 11 kiosk mode?

Once IT admins enable Windows 10 and Windows 11 kiosk mode, organizations can implement various tailored use cases to meet their specific needs. For example, devices can be utilized as digital signage, displaying important information or promotional content in public spaces. Additionally, Kiosk Mode enables browser lockdowns in single-app configurations, ensuring that users can only access mission-critical applications, which enhances security and streamlines the user experience.

How to disable Windows assigned access kiosk mode on Windows 10 or Windows 11? 

To disable Windows Assigned Access kiosk mode in Windows 10 or Windows 11, open the Settings app and navigate to Accounts. From there, go to ‘Family & Other Users’ and look for the Set up a kiosk section. Click on Assigned Access to view the current kiosk configuration. Under Kiosk Info, select the assigned account and click on Remove Kiosk to disable Windows Lockdown Mode.

How to exit UEM-based Windows kiosk mode?

To exit single-app kiosk mode on a UEM, you need a specific key combination or password set by the system administrator. Common methods include pressing Ctrl + Alt + Del and entering the required credentials or using a designated exit sequence established during setup. If you are using a managed Windows device, you’ll need IT support and approval to exit kiosk mode.

What are the types of kiosk modes? 

Scalefusion offers several types of kiosk modes for Windows devices:

• Single App kiosk mode: Limits the device to run only one specified application, either a browser or a Win32 application.
• Multi-App kiosk mode: Allows multiple specified applications to run while restricting access to other parts of the device.
• Browser kiosk mode: Limits the device to running a specific web browser in a locked-down environment, ideal for web-based applications.

What versions of Windows have kiosk mode?

Kiosk mode is available in several versions of Windows. Here’s a breakdown:

1. Windows 10 Pro, Enterprise, and Education:
   These versions support kiosk mode, also referred to as “Assigned Access.” It allows IT administrators to restrict a device to running a single Universal Windows Platform (UWP) app for dedicated use cases.
2. Windows 10 Home:
   Kiosk mode is not supported on the Home edition. Users need to upgrade to Pro or higher editions to access this feature.
3. Windows 11 Pro, Enterprise, and Education:
   Similar to Windows 10, kiosk mode is also available on these editions of Windows 11, enabling single-app or multi-app configurations for specific use cases.

How to enable kiosk mode on different operating systems?

Enabling kiosk mode varies by operating system. Here’s a quick guide:

• Android: Use built-in tools or an UEM solution to lock devices into single or multiple apps for business use. Learn more.
• iOS/iPadOS: Configure devices into Single App Mode or Guided Access for secure usage. Learn more.
• ChromeOS: Utilize Chrome Enterprise settings to enable kiosk mode for web or app access. Learn more.

Each platform offers unique features and configuration methods to ensure device security and usability.

References:
1. StatsCounter