How to Set Up a Kiosk on Windows 11

A kiosk is a specialized computer mode that locks a PC to one or more specific applications. This setup is essential for public-facing devices, self-service kiosks, and digital signage. By restricting the user experience, you prevent unauthorized access to system files, settings, or sensitive data.

Why use a Kiosk?

You use a kiosk when you need to provide a controlled environment for users. It keeps your device secure and ensures the computer remains focused on its primary task without interference.

What happens when done?

Once configured, the computer will automatically launch your chosen application upon login. The user remains trapped within the designated app environment until an administrator intervenes to exit the session.

Note: You must have administrative privileges to perform these steps. User Account Control (UAC) must be enabled. You must be physically present at the machine; this cannot be configured via Remote Desktop.

Prerequisites for Kiosk Mode

Before beginning, ensure your device meets the following requirements:

• Edition: Windows 11 Pro, Enterprise, or Education. (Home edition does not support Assigned Access).
• Account Type: You must create a standard local user account. Do not use an administrator account for kiosk mode.
• Hardware: Ensure your hardware supports the intended application load.

How to set up Kiosk mode (Single-App)

To start, press Windows key + I or navigate to Start > Settings.

In the Settings window, click on Accounts and select Family & other users.

Locate the Set up a kiosk section and click Get Started.

Assign a generic name, such as “KioskUser,” and click Next.

Select an existing standard account or create a new one.

Choose the application you want to run. This is the only app the user will see.

If you choose Microsoft Edge, you have two modes:

• Digital sign or interactive display: Displays a specific website in full-screen mode.
• Public browser: Provides a limited web browser for public use.

Enter the URL and set the refresh interval to clear cache and cookies for security.

Click Next to finalize the configuration.

Advanced Configuration: Multi-App Kiosk

For complex deployments, you may need a multi-app kiosk. This allows users to access a specific set of approved applications. This is typically managed via MDM (Mobile Device Management) or Group Policy. You can use PowerShell to apply an XML configuration file to define the allowed apps.

Managing Kiosk Devices at Scale

For businesses managing multiple devices, manual setup is inefficient. Use UEM (Unified Endpoint Management) solutions like Microsoft Intune to deploy kiosk profiles across your fleet. This ensures consistent security policies and simplifies updates for all public-facing devices.

Troubleshooting Common Issues

• App not launching: Verify the user account is a standard user and not an administrator.
• Registry errors: Check paths like HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\AssignedAccessConfiguration to ensure settings are applied.
• Hardware integration: Ensure drivers for touchscreens or scanners are installed for the ‘All Users’ profile.

For more technical details, refer to the official Microsoft documentation.

Summary

Setting up a kiosk on Windows 11 is a robust way to secure public-facing computers. By using the Assigned Access feature, you restrict users to specific apps, protecting your system integrity. Whether using single-app mode for simple displays or multi-app configurations for advanced workflows, Windows 11 provides the tools necessary for professional device lockdown. Always test your configuration by restarting the machine before deploying it to a public environment.