If a device is running this version of Windows 10 | and this edition of Windows 10 | then you can switch or convert it to this edition of Windows 10 by these methods: | ||
---|---|---|---|---|
Store for Education (switch/convert all devices in your tenant) | Microsoft Store (switch/convert one device at a time) | Intune (switch/convert any number of devices selected by admin) | ||
Windows 10, version 1709 | Pro in S mode | Pro EDU | Pro | Not by this method |
Pro | Pro EDU | Not by any method | Not by any method | |
Home | Not by any method | Not by any method | Not by any method | |
Windows 10, version 1803 | Pro in S mode | Pro EDU in S mode | Pro | Not by this method |
Pro | Pro EDU | Not by any method | Not by any method | |
Home in S mode | Not by any method | Home | Not by this method | |
Home | Not by any method | Not by any method | Not by any method | |
Windows 10, version 1809 | Pro in S mode | Pro EDU in S mode | Pro | Pro |
Pro | Pro EDU | Not by any method | Not by any method | |
Home in S mode | Not by any method | Home | Home | |
Home | Not by any method | Not by any method | Not by any method |
A single-app kiosk uses the Assigned Access feature to run a single app above the lockscreen. When the kiosk account signs in, the app is launched automatically. The person using the kiosk cannot do anything on the device outside of the kiosk app. |
Method | Description |
---|---|
Locally, in Settings | The Set up a kiosk (previously named Set up assigned access) option in Settings is a quick and easy method to set up a single device as a kiosk for a local standard user account. This method is supported on Windows 10 Pro, Enterprise, and Education. |
PowerShell | You can use Windows PowerShell cmdlets to set up a single-app kiosk. First, you need to create the user account on the device and install the kiosk app for that account. This method is supported on Windows 10 Pro, Enterprise, and Education. |
The kiosk wizard in Windows Configuration Designer | Windows Configuration Designer is a tool that produces a provisioning package, which is a package of configuration settings that can be applied to one or more devices during the first-run experience (OOBE) or after OOBE is done (runtime). You can also create the kiosk user account and install the kiosk app, as well as other useful settings, using the kiosk wizard. This method is supported on Windows 10 Pro (version 1709 and later), Enterprise, and Education. |
Microsoft Intune or other mobile device management (MDM) provider | For managed devices, you can use MDM to set up a kiosk configuration. This method is supported on Windows 10 Pro (version 1709 and later), Enterprise, and Education. |
-AppName
, the user account that you specify for assigned access must have logged on at least once.Enable device setup if you want to configure settings on this page. If enabled: Enter a name for the device. (Optional) Select a license file to upgrade Windows 10 to a different edition. See the permitted upgrades. Toggle Configure devices for shared use off. This setting optimizes Windows 10 for shared use scenarios and isn't necessary for a kiosk scenario. You can also select to remove pre-installed software from the device. |
Enable network setup if you want to configure settings on this page. If enabled: Toggle On or Off for wireless network connectivity. If you select On, enter the SSID, the network type (Open or WPA2-Personal), and (if WPA2-Personal) the password for the wireless network. |
Enable account management if you want to configure settings on this page. If enabled: You can enroll the device in Active Directory, enroll in Azure Active Directory, or create a local administrator account on the device To enroll the device in Active Directory, enter the credentials for a least-privileged user account to join the device to the domain. Before you use a Windows Configuration Designer wizard to configure bulk Azure AD enrollment, set up Azure AD join in your organization. The maximum number of devices per user setting in your Azure AD tenant determines how many times the bulk token that you get in the wizard can be used. To enroll the device in Azure AD, select that option and enter a friendly name for the bulk token you will get using the wizard. Set an expiration date for the token (maximum is 180 days from the date you get the token). Click Get bulk token. In the Let's get you signed in window, enter an account that has permissions to join a device to Azure AD, and then the password. Click Accept to give Windows Configuration Designer the necessary permissions. Warning: You must run Windows Configuration Designer on Windows 10 to configure Azure Active Directory enrollment using any of the wizards. To create a local administrator account, select that option and enter a user name and password. Important: If you create a local account in the provisioning package, you must change the password using the Settings app every 42 days. If the password is not changed during that period, the account might be locked out and unable to sign in. |
You can provision the kiosk app in the Add applications step. You can install multiple applications, both Windows desktop applications (Win32) and Universal Windows Platform (UWP) apps, in a provisioning package. The settings in this step vary according to the application that you select. For help with the settings, see Provision PCs with apps Warning: If you click the plus button to add an application, you must specify an application for the provisioning package to validate. If you click the plus button in error, select any executable file in Installer Path, and then a Cancel button becomes available, allowing you to complete the provisioning package without an application. |
To provision the device with a certificate for the kiosk app, click Add a certificate. Enter a name for the certificate, and then browse to and select the certificate to be used. |
You can create a local standard user account that will be used to run the kiosk app. If you toggle No, make sure that you have an existing user account to run the kiosk app. If you want to create an account, enter the user name and password, and then toggle Yes or No to automatically sign in the account when the device starts. (If you encounter issues with auto sign-in after you apply the provisioning package, check the Event Viewer logs for auto logon issues under Applications and Services LogsMicrosoftWindowsAuthentication User InterfaceOperational.) In Configure the kiosk mode app, enter the name of the user account that will run the kiosk mode app. Select the type of app to run in kiosk mode, and then enter the path or filename (for a Windows desktop application) or the AUMID (for a Universal Windows app). For a Windows desktop application, you can use the filename if the path to the file is in the PATH environment variable, otherwise the full path is required. |
On this step, select your options for tablet mode, the user experience on the Welcome and shutdown screens, and the timeout settings. |
You can set a password to protect your provisioning package. You must enter this password when you apply the provisioning package to a device. |
KioskModeApp
setting. In the KioskModeApp
setting, you enter the user account name and the AUMID for the app to run in kiosk mode.