How to Set Up Kiosk Mode On Windows 10/11 Devices?

With a market share of 73.31%, Windows remains the leading desktop operating system worldwide^[1]. Both small to medium businesses and large enterprises are increasingly choosing Windows 10 and Windows 11 devices to meet their work needs. As organizations strive to enhance security, streamline operations, and improve user experiences, the importance of Windows kiosk mode is evident.

Organizations can create a focused work environment by deploying Windows devices in kiosk mode to enhance their productivity and security. Kiosk mode restricts access to specific applications, websites, and settings, allowing businesses to deploy Windows devices securely. This setup enables users to concentrate on essential tasks without distractions or prevents the risks associated with unauthorized access.

This blog provides an overview of Windows kiosk mode and a step-by-step guide for setting up single-app kiosk mode for Windows 10 and Windows 11, helping your organization maximize the advantages of this powerful feature.

What is Windows Kiosk Mode?

Kiosk mode (also known as assigned access) on Windows 10 and 11 devices is a security feature that allows you to run only specific or multiple applications and settings, providing users with a locked-down experience on a device. This is useful when devices are in public places and business environments, such as self-service kiosks, POS, digital signage, and retail checkouts.

In Windows Kiosk Mode, the device boots directly into the designated app, and the user is prevented from accessing the desktop, start menu, or other system features. This helps ensure the device is used only for its intended purpose, improving security and simplifying the user experience.

How to Set Up Kiosk Mode in Windows 10/11 Devices using Scalefusion UEM?

Scalefusion UEM offers an intuitive, unified dashboard to control all device management functions, including enabling and disabling kiosk mode for Windows 10 and Windows 11.

Once a particular device is enrolled, IT admins can go to the Scalefusion dashboard, where they can easily set up kiosk mode on the required devices by creating a profile. They can also push, control, and alter the content to be displayed and be on top of which apps and browsers to run on kiosks.

What Are the Prerequisites for Enabling Kiosk Mode on Windows 10/11?

To enable kiosk mode on Windows 10 or Windows 11 devices, you must meet the following prerequisites across device-level, user account-level, and application-level:

1. Device-Level Requirements

• Kiosk mode is supported on Windows 10 and 11 Pro, Enterprise, Education, Business, and Home editions. For Windows Home (10/11), only browser-based or Win32 apps are supported. Devices must run Windows 10 (1803 or later) or Windows 11 (22H2 or later). 
• Scalefusion also supports Windows 7, 8.1, and Home editions when enrolled via agent-based MDM. Supported hardware includes desktops, laptops, Surface Pro/Core, and Windows IoT LTSC devices.

2. User Account-Level Requirements

• Kiosk mode in Windows 10 and 11 is user-specific and requires a standard user account—administrator accounts are not supported. 
• To configure user permissions, open the Local Security Policy, go to Local Policies > User Rights Assignment, select Allow log on locally, and add the target user. 
• This ensures the account can operate in kiosk mode under group policy settings.

3. Application-Level Requirements

• Only UWP (Universal Windows Platform) and Win32 applications are supported in kiosk mode.
• UWP apps must be available via the Microsoft Store or pre-installed, and you need the app’s unique Application ID for setup. 
• Win32 apps must be installed on the device prior to configuration and are supported across all editions that allow kiosk deployment, including Windows Home.

Step-by-step Guide to Set Up Single-app Kiosk Mode

Step 1: Log in to the Scalefusion dashboard.

Step 2: Navigate to Device Policies and Profiles Section and click on Device Profiles.

Step 3: Click on Create New Profile on the top-right corner of the screen. 

Step 4: Select the Windows tab. Enter a profile name and click Submit.

Step 5: Under the Select Apps section choose Skip Application Policy.

Step 6: Navigate to Settings section → Single/Kiosk App Mode. Select the type of application that needs to be set in Single App Mode, from the drop-down. 

Note: Depending on the application you want to use in single-app kiosk mode, click its name to view the specific setup steps.

Following are the options to select from: 

a. Skip kiosk app: This option removes the previously set kiosk app (if any). This option is selected by default. 

b. Pre-installed Applications: This sets one of the pre-installed UWP apps that is allowed in the Select Apps section as the kiosk app.

c. Third-party application: This option sets your in-house enterprise app as the Kiosk app.

d. Browser application: Use this option to set – Google Chrome, Microsoft Edge, Firefox or Windows Kiosk Browser as the kiosk browser app.

e. Win32 Application: This option sets a Win32 application as the kiosk app.

f. Scalefusion FileDock application: Use this option to set Scalefusion’s proprietary FileDock application as the kiosk app.

g. Scalefusion ProSurf Browser: This option sets Scalefusion’s customized browser – ProSurf in single app kiosk mode. This app provides a secure and restricted browsing experience. 

Step 7: After selecting a kiosk app, choose the user account on which the kiosk mode needs to be applied. You get two options:

a. Enter Primary Username: If your Windows PCs already have user accounts configured then enter the user name. 

b. Autocreate kiosk user account: Select this option if the user account is not configured in your Windows PC. Choosing this option will create a kiosk user account which will be logged in automatically after the device is rebooted. 

Step 9: Click on Create Profile button on the top right of your screen.

Step 10: Click Apply to push the multi-app kiosk profile to device groups/user groups/individual devices

Result: This locks your Windows 11 devices into single app kiosk mode for streamlined and secured usage. 

Lock your device to a single application for streamlined use and security. Follow this simple guide to set up Kiosk Mode on your Windows 10 and Windows 11 machine.

How to Configure Single-App Kiosk Mode on Windows 10 and Windows 11

How to Configure Multi-App Kiosk Mode on Windows 10 and Windows 11

Set up kiosk mode on Windows 10/11 manually using Windows Assigned Access

Windows Assigned Access is a feature in Windows operating systems that allows administrators to restrict a device to running a single application. To configure kiosk mode on Windows 10 devices, follow these steps:

To configure kiosk mode on a Windows device, follow these steps:

Step 1: Begin by creating a local standard user account using an Administrator account.
Step 2: Open the Settings app by pressing the Windows Key + I combination.
Step 3: Navigate to Accounts > Other Users and then select Set up assigned access.
Step 4: Choose the Standard user account you created in Step 1 by selecting Choose an Account.
Step 5: Next, click Choose an App and pick the app you want to restrict access to from the list of supported applications for single-app kiosk mode (also called assigned access).
Step 6: Restart the device and sign in with the Standard user account credentials to activate kiosk mode.

While Windows Assigned Access provides a simple way to configure kiosk mode, it has notable limitations. It only supports a single app at a time, which can be restrictive for more complex use cases. Additionally, it lacks the advanced security features and customization options often required for larger deployments. For organizations with more demanding needs, it is advisable to utilize comprehensive Unified Endpoint Management (UEM) solutions like Scalefusion UEM.

Benefits of kiosk mode for Windows devices

Implementing kiosk mode on Windows 10 and Windows 11 devices offers you a range of benefits:

1. Ensured security

Kiosk mode ensures Windows 10 and Windows 11 device security, allowing you to deploy them in public-facing environments. It secures point-of-sale systems, public access terminals, and other devices that need to be protected from unauthorized access.

Similarly, you can restrict users’ access to specific applications, websites, or device settings. This minimizes the risk of exposure to sensitive information while maintaining compliance with industry regulations such as HIPAA and GDPR.

2. User productivity

In business environments, kiosk mode can significantly enhance user productivity by offering streamlined access to essential tools and applications, eliminating the need to navigate the full Windows 10 and Windows 11 desktop.

This focused approach allows users to quickly engage with the specific applications they require, minimizing distractions and reducing the time spent on unnecessary tasks. As a result, employees can work more efficiently, leading to improved performance and a more productive workplace.

3. Increased operational efficiency

Applying kiosk mode to Windows devices increases efficiency by restricting access to specific applications or websites. Users can quickly navigate tasks without the confusion of unrelated options. This focused environment accelerates workflow, ensuring that users can complete their tasks with efficiency and consume less time.

Moreover, as you restrict access to the Windows desktop and other system settings, there is less chance of users unintentionally making changes or causing system errors. This reduces the need for device maintenance and troubleshooting.

4. Enhanced customer service

Deploying Windows 10 and Windows 11 devices in kiosk mode offers customers a smooth and focused user experience based on their needs. For instance, in a retail setting, kiosks can facilitate a self-service shopping experience, allowing customers to browse products and make purchases independently, without staff assistance.

With access to dedicated applications or websites, users can interact directly with the applications they need, free from distractions. This enhances customer engagement and streamlines the purchasing process.

5. Versatility

Single-app kiosk mode for Windows is adaptable and applicable across various industries and settings. It is commonly utilized in retail for self-service kiosks, in museums for interactive displays, and in enterprises for dedicated task-specific workstations.

Get Scalefusion UEM to configure Windows kiosk mode on Windows 10/11

Scalefusion UEM’s kiosk mode for Windows offers a robust solution to the limitations of traditional Windows Assigned Access. It provides enhanced security, advanced customization, and multi-app support, making it ideal for businesses needing versatile, secure, and scalable device management.

With centralized control and the ability to configure Windows devices remotely, Scalefusion UEM is perfect for a variety of industries—from retail to education—ensuring that your public-facing and dedicated devices are secure and optimized.

References:
1. StatsCounter

FAQs

1. What is Windows 11 kiosk mode?

Windows 11 Kiosk Mode is a feature in Windows that enables a device to run a single app or a limited set of apps in a restricted environment. It locks down the user interface, preventing access to system settings, file explorer, and other apps, ensuring a secure and controlled experience. This is ideal for use cases like public terminals, digital signage, retail point-of-sale systems, and education environments. Windows 11 Kiosk Mode can be configured for single-app (UWP or Win32) or multi-app setups, depending on the organization’s needs.

2. What are the common use cases for using kiosk mode in Windows 10/11?

Windows 10 and Windows 11 kiosk mode allows:

• Digital signage in public spaces.
• Interactive kiosks for self-check-in or product selection.
• Single-app setups for business apps or Microsoft Edge.
• Multi-app kiosk experiences for enterprise and education use cases where users need access to a limited set of Windows desktop applications.

Whether it’s checking product availability or running internal tools, kiosk devices ensure that the interface remains consistent and secure.

3. What are the types of Windows 11 kiosk mode?

Windows supports various kiosk setups to suit different business needs:

• Single-App Mode: Locks the device to one app (e.g., browser or business app).
• Multi-App Mode: Allows running multiple whitelisted applications in a controlled environment.
• Browser Kiosk Mode: Restricts users to web-based interactions using Microsoft Edge or another browser, ideal for lightweight interactions.

These modes are useful for creating a custom user interface that limits access while maximizing usability.

4. Which Windows versions support kiosk mode?

• Windows 10 Pro, Enterprise, and Education: Fully support kiosk mode (Assigned Access) with UWP or Win32 app control.
• Windows 10 Home: Limited support, only through specific configurations or with MDM tools like Scalefusion.
• Windows 11 Pro, Enterprise, and Education: Offers full support for Windows 11 multi-app kiosk, lock screen customization, and user account control.

Windows 8 and 8.1 support basic kiosk functionality but lack the modern enhancements found in Windows 10/11.

5. How do I enable kiosk mode on different platforms (Windows, Android, iOS, ChromeOS)?

• Windows: Use Settings, PowerShell, or MDM tools to configure kiosk mode in Windows 11. Choose an app and assign a kiosk account. 
• Android: Lock devices into specific apps using UEM-based kiosk mode or native tools like Android Enterprise. Learn more.
• iOS/iPadOS: Use Guided Access or Single App Mode to restrict device usage. Learn more.
• ChromeOS: Deploy via Chrome Enterprise Admin Console for secure, browser-only experiences. Learn more.

Each OS offers customization and flexibility for businesses seeking a locked-down interface.