<?xml version="1.0" encoding="utf-8"?> <AssignedAccessConfiguration xmlns="http://schemas.microsoft.com/AssignedAccess/2017/config"> <Profiles> <Profile Id="KioskProfile"> <AllAppsList> <AllowedApps> <App DesktopAppPath="C:\Program Files\Google\Chrome\Application\chrome.exe" /> <App AppUserModelId="Microsoft.WindowsCalculator_8wekyb3d8bbwe!App" /> </AllowedApps> </AllAppsList> <StartLayout> <![CDATA[<LayoutModificationTemplate xmlns:defaultlayout="http://schemas.microsoft.com/Start/2014/FullDefaultLayout" ...>]]> </StartLayout> <Taskbar ShowTaskbar="true" /> </Profile> </Profiles> <Configs> <Config> <Account>KioskUser</Account> <DefaultProfile Id="KioskProfile" /> </Config> </Configs> </AssignedAccessConfiguration> Deploy via Configure assigned access with a provisioning package in . 5. Edge Kiosk Mode (Deep Options) Edge can run as a digital sign or public browser with extreme lockdown.

while ($true) $proc = Get-Process -Name "MicrosoftEdge" -ErrorAction SilentlyContinue if (!$proc) Start-Process "microsoft-edge://" Start-Sleep -Seconds 30

Launch via PowerShell (run as kiosk user):

Set via registry: