Skip to content

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/central/Mobile/help/en-us/index.html?contextId=windows-policy-kiosk-mode

Kiosk mode configuration (Windows policy)

Restriction

The kiosk app must be a Universal Windows Platform (UWP) app.

With the Kiosk mode configuration, you set up a Windows computer to run in kiosk mode.

To configure kiosk mode, you select a user account (kiosk user) and an app (kiosk app). When the kiosk user signs in to Windows, only the kiosk app runs.

Setting Description
User account

The user account you want to associate with kiosk mode.

The account must be available on the computer when you assign the policy.

Use one of the following formats:

  • Local account:

    <computer name>\<username> or .\<username> or just <username>

  • Domain account:

    <domain>\<username>

  • Azure AD account:

    AzureAD\<email>, for example AzureAD\johnsmith@example.com
App AUMID

The Application User Model ID (AUMID) of the kiosk app.

For information on finding the AUMID, see Find the Application User Model ID of an installed app.

The kiosk app must be a Universal Windows Platform (UWP) app, not a Win32 app installed from an .msi file. Apps installed from Microsoft Store are UWP apps.

Turn off kiosk mode after restart

By default, the computer remains in kiosk mode after a restart. To change this behavior, sign in to the computer with the kiosk user account, go to Settings > Accounts > Sign-in options, and turn off Use my sign-in info to automatically finish setting up my device after an update or restart.