You need to set up kiosk mode in Windows 11 or Windows 10 without exposing the desktop, Start menu, or other apps. Windows Assigned access looks promising for a single public-facing app, and the Settings method is the simplest place to start.
Fix #1: Configure kiosk mode in Windows 11
Assigned access creates a local account that opens one supported app in full-screen mode. Sign in with an administrator account before starting. Assigned access requires Windows Pro, Enterprise, Education, or IoT Enterprise; Windows Home is not supported.
- Press
Windows + Ito open Settings. - Select Accounts > Other users.
You should see Set up a kiosk near the bottom of the page.
- Select Get started under Set up a kiosk. Depending on your Windows edition, this page may use the Assigned access label.
The kiosk setup window should open.
- Enter a name for the kiosk account, then select Next.
Windows should confirm the new local account and display the available apps.
- Select the app that the kiosk account should run, then choose Next.
The list normally contains supported Microsoft Store apps and Microsoft Edge. A classic desktop program may not appear in this basic setup.
- If you selected Microsoft Edge, choose As a digital sign or interactive display or As a public browser, then enter the website address.
Use digital signage for a fixed dashboard or display. Public browsing is better for a shared web terminal because Windows can reset the browsing session.
- Select Next, review the configuration, and choose Close.
The kiosk account and its assigned app should now appear under Set up a kiosk.
- Sign out of the administrator account.
- Select the kiosk account on the sign-in screen.
- Sign in and wait for the assigned app to open.
The app should fill the screen without displaying the normal Windows desktop.
Fix #2: Configure kiosk mode in Windows 10
These steps apply to Windows 10 version 1809 or later. In 2026, standard Windows 10 version 22H2 no longer receives regular support, so use Windows 11 for a new kiosk deployment when the hardware supports it.
- Sign in with an administrator account.
- Press
Windows + Ito open Settings. - Select Accounts.
- Open Other users, Family & other users, or Other people. The displayed label depends on the installed Windows 10 build.
- Select Set up a kiosk, Assigned access, or Set up assigned access.
- Choose Get started or Choose an account.
- Create a kiosk account, or select an existing standard local account if Windows offers that option.
- Select Choose an app, then pick the supported app you want to run.
- Confirm the configuration and close Settings.
- Sign out, select the kiosk account, and sign in.
Windows should launch the assigned app in full-screen mode. If you use a touchscreen monitor, test every screen the visitor needs before putting the PC into service.
Fix #3: Test the kiosk restrictions
Donāt hand over the kiosk until youāve checked its exit behavior and administrator security.
- Sign in with the kiosk account.
- Try opening the Start menu, taskbar, and desktop.
Those Windows elements should remain unavailable in a single-app kiosk.
- Press
Ctrl + Alt + Delete.
Windows should display its security screen, where you can sign out or switch users.
- Return to the sign-in screen and confirm that every administrator account requires a password.
- Sign back into the kiosk account and test the assigned app again.
If the app opens full screen and Ctrl + Alt + Delete returns to the security screen, so far, so good. Keep a USB keyboard available for maintenance if the kiosk normally uses touch input.
Fix #4: Install an app that doesnāt appear in the kiosk list
The basic single-app setup supports Microsoft Edge and compatible Microsoft Store apps. The app must also be available to the account selected for Assigned access.
- Open Settings > Accounts > Other users.
- Add a standard local user if you canāt select the existing kiosk account.
- Sign out of Windows.
- Sign in once with that standard account.
- Install or open the required Microsoft Store app.
- Sign out and return to your administrator account.
- Open Settings > Accounts > Other users > Set up a kiosk.
- Select the prepared account and check the app list again.
The installed app should now appear if it supports single-app Assigned access. If it remains missing, use a managed kiosk method instead of trying to force an unsupported program into the list.
Fix #5: Stop the administrator account from reopening after updates
Windows can use saved sign-in information to finish device setup after an update. Turn that behavior off on the administrator account if the wrong user keeps appearing after a restart.
- Sign in with the administrator account.
- Open Settings > Accounts > Sign-in options.
- Find the setting named Use my sign-in info to automatically finish setting up after an update. Its full wording or placement may vary by supported Windows version.
- Turn the setting Off.
- Restart the PC and check the sign-in screen.
Windows should wait for an account selection instead of reopening the administrator session.
Fix #6: Check automatic kiosk sign-in
On a PC that is not joined to an Active Directory domain or Microsoft Entra ID, the Settings kiosk setup configures automatic sign-in for the kiosk account. Restart the PC and verify that it opens the intended app. Use this only on a physically secured kiosk, since a visitor can restart it and access that app.
If automatic sign-in is unwanted, Microsoftās setup guidance says to turn off Use my sign-in info to automatically finish setting up my device after an update or restart in the kiosk accountās sign-in options before applying the kiosk configuration. On an organization-managed device, ask its administrator to check the account policy.
Set Up Several Apps or Multiple Kiosks
The Settings method is a good option for one PC running one app. A reception terminal, public browser, or digital sign usually fits that model.
For several allowed apps, configure a multi-app kiosk with an XML Assigned access profile. The profile defines the permitted apps, Start layout, and available Windows functions.
Organizations can deploy that profile through Microsoft Intune or a provisioning package made with Windows Configuration Designer. These methods also make more sense when several PCs need the same settings.
A wired Ethernet adapter can reduce connection problems on a fixed web kiosk. Test the assigned website after every policy or network change.
When Kiosk Mode Is Missing
If Set up a kiosk doesnāt appear, check the Windows edition and version first. Assigned access is not available on Windows Home, and an organization may hide local controls through device-management policies.
On a work-managed PC, ask the administrator whether Microsoft Intune or another management service controls Assigned access. Local Settings changes may be unavailable or overwritten by the next policy refresh.
Fix #1 is usually enough for a single Windows 11 kiosk, and Assigned access is a solid choice when one supported app meets the job. If the kiosk option disappears, unsupported apps remain absent, or restrictions keep reverting, use Intune or a provisioning package for firmer control.