Guidelines for choosing an app for assigned access (kiosk mode)

Applies to

You can use assigned access to restrict customers at your business to using only one Windows app so your device acts like a kiosk. Administrators can use assigned access to restrict a selected user account to access a single Windows app. You can choose almost any Windows app for assigned access; however, some apps may not provide a good user experience.

The following guidelines may help you choose an appropriate Windows app for your assigned access experience.

General guidelines

Windows apps must be provisioned or installed for the assigned access account before they can be selected as the assigned access app. Learn how to provision and install apps.

Updating a Windows app can sometimes change the Application User Model ID (AUMID) of the app. If this happens, you must update the assigned access settings to launch the updated app, because assigned access uses the AUMID to determine which app to launch.

Apps that are generated using the Desktop App Converter (Desktop Bridge) cannot be used as kiosk apps.

Guidelines for Windows apps that launch other apps

Some Windows apps can launch other apps. Assigned access prevents Windows apps from launching other apps.

Avoid selecting Windows apps that are designed to launch other apps as part of their core functionality.

Guidelines for web browsers

In Windows 10, version 1809, Microsoft Edge includes support for kiosk mode. Learn how to deploy Microsoft Edge kiosk mode.

In Windows 10, version 1803 and later, you can install the Kiosk Browser app from Microsoft to use as your kiosk app. For digital signage scenarios, you can configure Kiosk Browser to navigate to a URL and show only that content — no navigation buttons, no address bar, etc. For kiosk scenarios, you can configure additional settings, such as allowed and blocked URLs, navigation buttons, and end session buttons. For example, you could configure your kiosk to show the online catalog for your store, where customers can navigate between departments and items, but aren’t allowed to go to a competitor’s website.

Kiosk Browser supports a single tab. If a website has links that open a new tab, those links will not work with Kiosk Browser. Kiosk Browser does not support .pdfs.

Kiosk Browser cannot access intranet websites.

Kiosk Browser must be downloaded for offline licensing using Microsoft Store For Business. You can deploy Kiosk Browser to devices running Windows 10, version 1803 (Pro, Business, Enterprise, and Education).

1. Get Kiosk Browser in Microsoft Store for Business with offline license type.
2. Deploy Kiosk Browser to kiosk devices.
3. Configure policies using settings from the Policy Configuration Service Provider (CSP) for KioskBrowser. These settings can be configured using your MDM service provider, or in a provisioning package. In Windows Configuration Designer, the settings are located in Policies > KioskBrowser when you select advanced provisioning for Windows desktop editions.

If you configure the kiosk using a provisioning package, you must apply the provisioning package after the device completes the out-of-box experience (OOBE).

Kiosk Browser settings

Kiosk Browser settings	Use this setting to
Blocked URL Exceptions	Specify URLs that people can navigate to, even though the URL is in your blocked URL list. You can use wildcards.

For example, if you want people to be limited to http://contoso.com only, you would add .contoso.com to blocked URL exception list and then block all other URLs. Blocked URLs Specify URLs that people can’t navigate to. You can use wildcards.

If you want to limit people to a specific site, add https://* to the blocked URL list, and then specify the site to be allowed in the blocked URL exceptions list. Default URL Specify the URL that Kiosk Browser will open with. Tip! Make sure your blocked URLs don’t include your default URL. Enable End Session Button Show a button in Kiosk Browser that people can use to reset the browser. End Session will clear all browsing data and navigate back to the default URL. Enable Home Button Show a Home button in Kiosk Browser. Home will return the browser to the default URL. Enable Navigation Buttons Show forward and back buttons in Kiosk Browser. Restart on Idle Time Specify when Kiosk Browser should restart in a fresh state after an amount of idle time since the last user interaction.

To configure multiple URLs for Blocked URL Exceptions or Blocked URLs in Windows Configuration Designer:

1. Create the provisioning package. When ready to export, close the project in Windows Configuration Designer.
2. Open the customizations.xml file in the project folder (e.g C:\Users\name\Documents\Windows Imaging and Configuration Designer (WICD)\Project_18).
3. Insert the null character string in between each URL (e.g www.bing.com  www.contoso.com).
4. Save the XML file.
5. Open the project again in Windows Configuration Designer.
6. Export the package. Ensure you do not revisit the created policies under Kiosk Browser or else the null character will be removed.

To enable the End Session button for Kiosk Browser in Intune, you must create a custom OMA-URI policy with the following information:

• OMA-URI: ./Vendor/MSFT/Policy/Config/KioskBrowser/EnableEndSessionButton
• Data type: Integer
• Value: 1

Rules for URLs in Kiosk Browser settings

Kiosk Browser filtering rules are based on the Chromium Project.

URLs can include:

• A valid port value from 1 to 65,535.
• The path to the resource.
• Query parameters.

Additional guidelines for URLs:

• If a period precedes the host, the policy filters exact host matches only.
• You cannot use user:pass fields.
• When both blocked URL and blocked URL exceptions apply with the same path length, the exception takes precedence.
• The policy searches wildcards (*) last.
• The optional query is a set of key-value and key-only tokens delimited by ‘&’.
• Key-value tokens are separated by ‘=’.
• A query token can optionally end with a ‘*’ to indicate prefix match. Token order is ignored during matching.

Examples of blocked URLs and exceptions

The following table describes the results for different combinations of blocked URLs and blocked URL exceptions.

Blocked URL rule	Block URL exception rule	Result
*	contoso.com fabrikam.com	All requests are blocked unless it is to contoso.com, fabrikam.com, or any of their subdomains.
contoso.com	mail.contoso.com .contoso.com .www.contoso.com	Block all requests to contoso.com, except for the main page and its mail subdomain.
youtube.com	youtube.com/watch?v=v1 youtube.com/watch?v=v2	Blocks all access to youtube.com except for the specified videos (v1 and v2).

The following table gives examples for blocked URLs.

Entry	Result
contoso.com	Blocks all requests to contoso.com, www.contoso.com, and sub.www.contoso.com
https://*	Blocks all HTTPS requests to any domain.
mail.contoso.com	Blocks requests to mail.contoso.com but not to www.contoso.com or contoso.com
.contoso.com	Blocks contoso.com but not its subdomains, like subdomain.contoso.com.
.www.contoso.com	Blocks www.contoso.com but not its subdomains.
*	Blocks all requests except for URLs in the Blocked URL Exceptions list.
*:8080	Blocks all requests to port 8080.
contoso.com/stuff	Blocks all requests to contoso.com/stuff and its subdomains.
192.168.1.2	Blocks requests to 192.168.1.2.
youtube.com/watch?v=V1	Blocks youtube video with id V1.

Other browsers

You can create your own web browser Windows app by using the WebView class. Learn more about developing your own web browser app:

Secure your information

Avoid selecting Windows apps that may expose the information you don’t want to show in your kiosk, since kiosk usually means anonymous access and locates in a public setting like a shopping mall. For example, an app that has a file picker allows the user to gain access to files and folders on the user’s system, avoid selecting these types of apps if they provide unnecessary data access.

App configuration

Some apps may require additional configurations before they can be used appropriately in assigned access. For example, Microsoft OneNote requires you to set up a Microsoft account for the assigned access user account before OneNote will open in assigned access.

Check the guidelines published by your selected app and set up accordingly.

Develop your kiosk app

Assigned access in Windows 10 leverages the new lock framework. When an assigned access user signs in, the selected kiosk app is launched above the lock screen. The kiosk app is running as an above lock screen app.

Test your assigned access experience

The above guidelines may help you select or develop an appropriate Windows app for your assigned access experience. Once you have selected your app, we recommend that you thoroughly test the assigned access experience to ensure that your device provides a good customer experience.

What is assigned access in windows 10? — (FAQ)

Category: what . Last Updated: 2 months ago . Views: 6

ANSWER

Assigned access is a feature on Windows 10 that allows you to create a lockdown environment that lets users interact with only one app when they sign into a specified account. With Assigned access, users won’t be able to get to the desktop, Start menu, or any other app, including the Settings app. Volume 0%

What is Assigned Access and How To Set it Up in Windows 10 ?

Introduced first in Windows 8.1, Assigned Access is a setting that lets you restrict a specified standard user account to only use one Windows Store App when signed in. It’s also called Kiosk mode because you can restrict customers to only use one app …

How to use Assigned Access in Windows 10? The Assigned Access feature was introduced first in Windows 8.1 but Microsoft has improved it in Windows 10. Though the feature was designed for kiosk application, it can be used to restrict users to interact with a single app.

How to Turn On «Assigned Access» (Kiosk Mode) in Windows 10? Turning On “Assigned Access” in Windows 10 As I said above, assigned access basically takes over a user account and restricts it to running one Store app only, in full screen. So you can tell that we must create a new user account …

How to give access to only to one app, using assigned ?

Windows 10 has a feature called assigned access that allows you to restrict a local user account to use only one app from the Microsoft Store. Thus, whenever someone signs in with that user account, he or she can use just the app that the administrator has assigned. The user won’t be able to switch or to close the app.

How to use any app in assigned access mode in Windows 10 ? As I wrote before, by default when you setup assigned access the UI only shows app which have the aboveLockScreen extension registered. I talked to the PM who owns this feature to ask why and the reason is because we changed the behavior of how assigned access works (lock the screen and launch the app above the lock screen) we found out a lot of existing apps crash when …

What is Windows 10 Kiosk Mode and How to Set Up it? A kiosk with Windows 10 is a dedicated PC where an Administrator can set up a specific app, sign, or picture to display. For example, a web browser in a hotel room or a menu in a restaurant. Anyone can access this PC, so Windows blocks all the access to any other app or OS’s corner except those defined by the Administrator.

How to set up Assigned access on Windows 10 to restrict ?

Assigned access is a feature on Windows 10 that allows you to create a lockdown environment that lets users interact with only one app when they sign into a specified account. With Assigned access,

How to use Assigned Access in Windows 10? Assigned Access is a feature introduced in Windows 8.1 OS. This feature restricts a specified standard user account to use only one standard Windows application. This feature allows Windows PCs to be configured as point-of-sale or kiosk systems. Windows 10 too supports this feature but it is available on Windows Professional, Enterprise or

How to setup and use Assigned Access (Kiosk Mode)? What is Assigned Access in Windows 10? The Kiosk mode is useful for creating a lockdown environment and setting up a Windows system in a general public area. It gives access to a user to use any single app for a specific function, such as an information kiosk or a kiosk for getting weather updates.

How to setup Assigned Access in Windows 10 (Kiosk Mode ? You can avoid all that with a feature called ‘Assigned Access’. With Assigned Access, you create a new user account that automatically launches one Windows Store app in full screen mode, with no

What is kiosk mode (Windows assigned access)?

Kiosk mode is available in Windows XP, Windows Vista, Windows 7 and Windows 8, though later versions such as Windows 8.1 refer to this feature as «assigned access.»

How to Enable Kiosk Mode in Windows 10 (Assigned Access)? Kiosk Mode, also known as Assigned Access in Windows 10 is nothing but assigning the device to for a specific purpose using a specific application. While in kiosk mode, you cannot use any other app other than the ones allowed by the system or network administrator.

How to Set Up Assigned Access in Windows 10? How to Make a Windows 10 PC into Kiosk Mode With Assigned Access — Duration: 4:27. Soft Solutions 80,432 views. Multi-App Kiosk Profile for Windows 10 — Feature Walk-through — …

How to Make a Windows 10 PC into Kiosk Mode With Assigned ? In this tutorial, I will show you how to easily put a Windows PC into Kiosk Mode with Assigned Access without any additional software. This feature makes it

Last modified: February 15 2021

NEXT QUESTION:

Please let the audience know your advice: