Whether it is a retail store running a customer-facing self-service terminal, a hospital using a check-in screen at reception, or a school lab offering limited-access computers to students, one thing is clear: shared Windows devices must be locked down. You don’t want users fiddling with system settings, browsing the web freely, or accessing unauthorized apps. These devices must serve a single purpose and they should do it securely.

That is where Windows 11 Kiosk Mode comes in. Designed to restrict user access and streamline device functionality, kiosk mode transforms a regular PC into a purpose-specific machine.
In this guide, we will show you how to set up kiosk mode in Windows 11 using three different methods:
- Using Assigned Access (built-in tool)
- Using PowerShell (for Win32 apps)
- Using UEM solution (for managing devices at scale)
What is Kiosk Mode in Windows 11?
Kiosk Mode in Windows 11 is a configuration that locks down a device to run only specific apps. It creates a restricted environment that prevents users from accessing system files, settings, or any unauthorized software.
Once a device boots up in kiosk mode, it automatically launches a pre-configured app (or apps), eliminating distractions and protecting sensitive settings. It is especially useful for:
- Customer service counters in retail.
- Check-in and info kiosks in healthcare.
- Exam or learning stations in education.
- Public web browsing terminals in libraries or cafes.
- Digital signage systems.
Types of Kiosk Mode in Windows 11
1. Single-App Kiosk Mode
In this mode, the device runs only one app in full-screen. The user cannot switch or exit the app. This is ideal for use cases like:
- Digital signage.
- Point-of-sale systems.
- Purpose specific device.
- Exam computers.
2. Multi-App Kiosk Mode
The multi-app kiosk mode allows a controlled list of apps that users can access. Users can use multiple allowed apps but still can’t exit to the kiosk mode or explore other system areas.
Suitable for:
- Shared workstations in schools
- Multi-function kiosks in airports or offices
3 Ways to Set Up Kiosk Mode on Windows 11
Depending on your use case, technical expertise, and number of devices, there are multiple ways to enable kiosk mode in Windows 11. Below, we explore three proven methods ranging from Windows’ built-in tools to a scalable enterprise solution using UEM.
Method 1: Set Up Kiosk Mode Using Assigned Access (GUI Method)
Assigned Access is a built-in Windows feature that lets you configure a kiosk by assigning a single app to a user account. This is the most straightforward method for setting up kiosk mode on a Windows 11 device.
Steps to set up:
- Open Settings and go to Accounts > Other users.
- Scroll to the Set up a kiosk section and click Get started.
- Enter a name for the kiosk user account. Windows creates a new local account.
- Choose the app you want to run (e.g., Microsoft Edge, a UWP app).
- Select the usage mode: e.g., full-screen digital signage or public browsing.
- Complete the setup and restart the device.
When the kiosk user logs in, the device boots directly into the assigned app. Users cannot exit the app or access other system features.
Method 2: Set Up Kiosk Mode with PowerShell (For Win32 Apps)
If your kiosk app is a non-UWP app (such as a traditional .exe), you’ll need to use PowerShell or a provisioning package. PowerShell is a more advanced method, ideal for configuring Windows kiosk mode with non-UWP apps or custom .exe programs. It’s especially helpful for automating deployment across many machines or integrating kiosk setup into scripts.
How to do it:
To enable kiosk mode using PowerShell for Win32 or non-UWP apps:
- Open PowerShell as an administrator on the Windows 11 device.
- Use the Get-StartApps command to list available apps and find the AppUserModelId:
Get-StartApps | Select-Object Name, AppID
- Identify the app you want to assign for kiosk use.
- Use the following command to apply kiosk settings for the specified user:
Set-AssignedAccess -AppUserModelId “AppID” -UserName “KioskUser”
Replace AppID with the actual app model ID and KioskUser with the intended user account.
- Restart the device and sign in to the kiosk account to verify it boots into the assigned app. “AppID” -UserName “KioskUser”
You can find the AppUserModelId by running:
“`powershell
Get-StartApps | Select-Object Name, AppID
This method gives more flexibility, especially if you’re configuring kiosk mode remotely or need to automate it across many machines.
Method 3: Set Up Kiosk Mode in Windows 11 Using Scalefusion UEM
If you want to enable kiosk mode on Windows 11 devices at scale, Scalefusion Unified Endpoint Management (UEM) is the most efficient way. It allows centralized control, advanced policy settings, and remote deployment.
Steps to Configure Single-App Kiosk Mode:
- Login to the Scalefusion dashboard.
- Navigate to Device Policies & Profiles > Device Profiles.
- Click Create New Profile.
- Select the Windows tab, enter a profile name, and click Submit.
- Under Select Apps, choose Skip Application Policy for Single app kiosk mode otherwise select multi-app kiosk mode.
- Go to Settings > Single/Kiosk App Mode.
- From the drop-down, select the type of app to allow in kiosk mode
User Account Setup Options:
- Enter Primary Username: Use existing accounts on Windows PCs.
- Auto create Kiosk User Account: Automatically creates and logs in a new kiosk user after reboot.
- Click Create Profile.
- Click Apply to push the profile to individual devices or groups.
Your device now boots directly into kiosk mode as per your configuration.
Which is the Best Method to Set Up Kiosk Mode in Windows 11?
While Assigned Access is convenient for individual devices, and PowerShell provides deeper control, they aren’t practical for managing kiosk mode at scale.
Scalefusion UEM is the best method if you want:
- Remote deployment
- Centralized configuration
- Support for both single and multi-app kiosk modes
- Advanced controls and reporting
Why Choose Scalefusion for Windows 11 Kiosk Mode Setup?
Scalefusion offers much more than just enabling kiosk mode on Windows 11. It’s a full UEM platform that simplifies managing your entire Windows device fleet. Here’s what makes it stand out:
- Multiple Device Profiles: Create custom kiosk configurations for different departments or use cases.
- Multi-App Kiosk Mode: Allow a restricted set of apps while blocking all others.
- Auto-Launch Apps on Boot: Ensure essential apps are always up and running.
- Security Policy Enforcement: Push firewall, antivirus, VPN, and Wi-Fi settings remotely.
- Real-Time Monitoring: Track device status, app usage, and compliance.
- Remote Troubleshooting: Fix issues from the Scalefusion dashboard without needing physical access.
- Custom Branding: Apply your logo, company theme, and lock screen design.
- Instant Kiosk Mode Removal: Switch off kiosk mode or reconfigure profiles as needed.
Whether you manage 10 devices or 10,000, Scalefusion helps you standardize configuration, reduce manual effort, and enhance security.
Seamlessly Manage Your Windows Kiosks with Scalefusion
Kiosk mode is no longer a niche requirement. From customer service terminals to digital signage and secure exam environments, locking down Windows 11 devices is now a necessity.
While Windows provides tools like Assigned Access and PowerShell, these methods don’t scale well or offer comprehensive control.
That’s why IT teams and organizations prefer Scalefusion UEM. It not only simplifies the setup of kiosk mode on Windows 11, but also offers full lifecycle management, remote policy control, and visibility into every device.
If you are ready to streamline your Windows 11 kiosk mode setup, it’s time to make the shift to Scalefusion. Contact our experts today to book a free demo or start a 14-day free trial.