Showing results for 
Search instead for 
Did you mean: 

Setup Kiosk Mode On Windows 10/11

Rising Star III
Rising Star III

Hey folks,

It's been a while and finally I got a little breathing room to share my Friday joy (again) 😁.

Kiosk Mode on Windows - on a large scale? and you looking for a way to do it without paying for Intune?  

This post will get you covered, please read on. 

First Thing First

I will be focusing mainly for Single App Kiosk mode this time - since it's the most popular use case among the others (like, multi-app Kiosk mode, for another day 😉).


  • User account control (UAC) must be turned on to enable kiosk mode.
  • You have an app is Kiosk ready - the UWP App.
  • OR a desktop application - like Slack, Zoom etc.
  • Windows 10/11 Edu, Pro, Ent edition.
  • The Kiosk user must be logged in at least once to the machine. (more on that later)

Get Started

On JumpCloud

  • Create a user for Kiosk, add to the Kiosk user group (create one if not exists).shawnsong_0-1683877481436.png
  • Create a device group, add the designated Kiosk devices into it.shawnsong_1-1683877562564.png
  • Then, bind the device group to the Kiosk user group - Thus, the Kiosk user will be provisioned on all the Kiosk machine.                                                                        shawnsong_2-1683877675229.png
  • Remember we need to login once by using this Kiosk user on the machine. 

Now you have set up the foundation, let's dive into the "easy part". 

Option 1 - Microsoft store app, AKA UWP app

  • Once you installed the app from the store, run this to get the AUMID.
  • It looks like this - i.e. the Calculator:                                  shawnsong_4-1683878167521.png
  • Now create a JumpCloud Command with this line:
    # An example to set Calculator as the Kiosk App.
    $KioskUser = "kiosk.johnny” # Use your Kiosk username here. 
    $KioskApp = "Microsoft.WindowsCalculator_8wekyb3d8bbwe!App" 
    Set-AssignedAccess -AppUserModelId $KioskApp -UserName $KioskUser​
  • Run the command against the Kiosk device group. 
  • It looks like this:        Screen Recording 2023-05-12 at 16.31.43.gif
  • You can use the line below to remove the Kiosk setting: 


Option 2 - A Desktop App

This option probably will be the most popular one - technically, you can setup Kiosk mode for any application. I will use Slack as the demoing example here.

First, use a Windows machine to install Window Configuration Designer aka Windows IDC:

  • Get the version from Windows ADK instead of the same app from Microsoft Store.

Now, let's create a custom PPKG:

  • Choose the Kiosk wizard                                               shawnsong_5-1683881509923.png


  • Skip the first a few sections as shown here:shawnsong_6-1683881651274.png
  • Configure the Kiosk account:shawnsong_7-1683881739952.png
  • Next, leave the common settings as is:shawnsong_8-1683881817399.png
  • Create the PPKG:shawnsong_9-1683881901075.png
  • Now, you have the package, create a JumpCloud cmd, upload the ppkg as a file to it, then use the lines below:
    Install-ProvisioningPackage -QuietInstall -ForceInstall -PackagePath "C:\Windows\Temp\Slack.ppkg"​
  • Run the cmd against the Kiosk device group.
  • Tada!                        Screen Recording 2023-05-12 at 17.02.03.gif
  • From the cmd result you can get the package ID, thus similarly, you can remove this setting by run the line below: shawnsong_0-1683882896829.png
    Remove-ProvisioningPackage 28ea1c67-c4cf-410b-91c3-61939fced606​



Thanks for reading, happy Friday! 😎