By combining software restrictions with physical security measures (BIOS passwords and port locks), you can ensure your kiosk remains a helpful tool for users—not a security vulnerability for your network.
Set-AssignedAccess -UserName "kioskuser" -ConfigurationFilePath "C:\kiosk.xml"
Kiosk Mode is not a "set it and forget it" solution. Without proper physical and digital hygiene, a kiosk can be compromised.
Windows Kiosk Mode (officially Assigned Access ) locks a Windows device to run only one specific app or a restricted set of apps. It is designed for public-facing scenarios (e.g., information displays, self-service check-in) or single-purpose corporate devices (e.g., warehouse scanner, time clock). windows kiosk mode
For most users, the built-in "Set up a kiosk" wizard in Windows Settings is the fastest route. This utilizes Assigned Access.
There are two primary ways to achieve this in modern Windows environments:
Test: Sign out and sign in as the kiosk account. The chosen app launches full-screen. Windows Kiosk Mode (officially Assigned Access ) locks
This is a common annoyance in browser kiosks.
When configured correctly, the user cannot:
By default, pressing Shift 5 times activates Sticky Keys. On a kiosk, a savvy user could potentially interrupt the boot process or trigger a command prompt through accessibility shortcuts. This utilizes Assigned Access
Ctrl + Alt + Del → Sign out (or Alt + F4 if allowed).
Create a kiosk user account