Set Up Kiosk Mode On Windows

Kiosk Mode for Windows lets IT administrators restrict Windows devices to run only a specific set of applications. This article shows you how to leverage JumpCloud users and commands to configure Kiosk Mode on managed Windows devices and device groups. When the designated user signs in, the device automatically launches into the configured Kiosk Mode, and prevents the user from navigating away from the approved applications.

Prerequisites:

• User account control (UAC) must be turned on to enable kiosk mode. See UAC to learn more.
• A Kiosk compatible app such as UWP app or a desktop application such as Slack, must be installed on the target devices. 
• Target devices must be running Windows 10 or later, or any version of Windows 11. This policy is supported on the following Windows editions:
  • Windows Pro
  • Windows Enterprise
  • Windows Education

Considerations:

• The Kiosk user must be logged in at least once to the device.

Configuring the JumpCloud Kiosk User and Groups

First, we’ll create a designated JumpCloud kiosk user and then configure user and device group bindings.

To setup the kiosk users and groups in JumpCloud:

1. Log in to the JumpCloud Admin Portal.
2. Go to USER MANAGEMENT > Users and create a user. See Add Users to the Admin Portal to learn more.
3. Add the user to the Kiosk user group. See Get Started: User Groups to learn more.
4. Create a device group, add the designated Kiosk devices into it. See Create a Device Group to learn more.
5. Bind the device group to the Kiosk user group. See Add a User Group to a Device Group to learn more.

Deploying Kiosk Mode to Devices

After completing the previous steps, you can deploy Kiosk Mode to devices using one of the following options: 

Option 1

To use a UWP app downloaded from Microsoft Store:

1. Once you installed the app from the store, run following command to get the Application User Model ID (AUMID):

2. Create a JumpCloud Command and enter the following code in the command section. See Creating a Command Manually to learn more.

3. Run the command against the Kiosk device group. 
4. (Optional) You can use the following command to remove the Kiosk setting:

Option 2 

To use Windows IDC and a desktop app:

1. Use a Windows device to download and install Windows IDC. See Microsoft’s Install Windows Configuration Designer.
2. Choose the Kiosk wizard.
3. Configure the Kiosk account. Skip the sections as shown in the image below:

4. The common settings can be left unchanged as shown in the image:

5. Click Finish to create the package.  
6. Create a JumpCloud command, and upload the package as a file by using the following command:

7. Run the command against the Kiosk device group to set up Kiosk.
8. From the cmd result you can get the package ID.

9. (Optional) You can remove this setting by executing the following command: