Assigned access single-app kiosk

A single-app kiosk uses the assigned access feature to run a single app above the lock screen. When the kiosk account signs in, the app is launched automatically. The person using the kiosk cannot do anything on the device outside of the kiosk app.


Assigned access single-app kiosk mode is not supported over a remote desktop connection. Your kiosk users must sign in on the physical device that is set up as a kiosk.

Benefits of using a single-app kiosk

A single-app kiosk is ideal for public use. Using shell launcher, you can configure a kiosk device that runs a Windows desktop application as the user interface. The application that you specify replaces the default shell (explorer.exe) that usually runs when a user logs on. This type of single-app kiosk runs above the lock screen, and users will have access to only this app and nothing else on the system. This experience is often used for public-facing kiosk machines. Check out Set up a kiosk on Windows 10 Pro, Enterprise, or Education for more information.

Configuring your single-app kiosks

You have several options for configuring your single-app kiosk.


You can also configure a kiosk account and app for single-app kiosk within XML in a provisioning package by using a kiosk profile. Be sure to check the configuration recommendations before you set up your kiosk.

Additional Resources