-->

Applies to

• In Configure the kiosk mode app, enter the name of the user account that will run the kiosk mode app. Select the type of app to run in kiosk mode, and then enter the path or filename (for a Windows desktop application) or the AUMID (for a Universal Windows app). For a Windows desktop application, you can use the filename if the path to the file.
• Microsoft Remote Desktop (RDP) for Mac is a useful way to work with Windows apps and resources. Even though you’re operating macOS, you can still access PC-style desktops from your MacBook, iMac, or Mac Mini.
• The language packs are common to both the standard App-V 5.0 client and the Remote Desktop Services version of the App-V 5.0 client. If you install the App-V 5.0 client using the.exe, the installer will deploy only the language pack that matches the operating system running on the target computer.
• Microsoft Application Virtualization for Remote Desktop Services 4.6 helps consolidate remote desktop session host servers by offering the following features and benefits: Reduce app-to-app and multi-user application conflicts and hence the need for regression testing; Accelerate application deployment by reducing the deployment risk.

Home versions of Windows only have the remote desktop client for letting you connect to machines, but you need one of the pricier editions in order to connect to your PC. If you’re using Remote Desktop, getting it set up for access over the internet isn’t too difficult, but you will have to jump through a couple of hoops.

• Windows 10 Pro, Enterprise, and Education

Important

User account control (UAC) must be turned on to enable kiosk mode.

Kiosk mode is not supported over a remote desktop connection. Your kiosk users must sign in on the physical device that is set up as a kiosk. Apps that run in kiosk mode cannot use copy and paste.

You have several options for configuring your single-app kiosk.

Tip

You can also configure a kiosk account and app for single-app kiosk within XML in a provisioning package by using a kiosk profile.

Be sure to check the configuration recommendations before you set up your kiosk.

Set up a kiosk in local Settings

App type: UWP

OS edition: Windows 10 Pro, Ent, Edu

Account type: Local standard user

You can use Settings to quickly configure one or a few devices as a kiosk.

When your kiosk is a local device that is not managed by Active Directory or Azure Active Directory, there is a default setting that enables automatic sign-in after a restart. That means that when the device restarts, the last signed-in user will be signed in automatically. If the last signed-in user is the kiosk account, the kiosk app will be launched automatically after the device restarts.

• If you want the kiosk account signed in automatically and the kiosk app launched when the device restarts, there is nothing you need to do.

• If you do not want the kiosk account signed in automatically when the device restarts, you must change the default setting before you configure the device as a kiosk. Sign in with the account that you will assign as the kiosk account, go to Settings > Accounts > Sign-in options, and toggle the Use my sign-in info to automatically finish setting up my device after an update or restart setting to Off. After you change the setting, you can apply the kiosk configuration to the device.

Instructions for Windows 10, version 1809

When you set up a kiosk (also known as assigned access) in Settings for Windows 10, version 1809, you create the kiosk user account at the same time.

To set up assigned access in PC settings

1. Go to Start > Settings > Accounts > Other users.

2. Select Set up a kiosk > Assigned access, and then select Get started.

3. Enter a name for the new account.

   Note

   If there are any local standard user accounts on the device already, the Create an account page will offer the option to Choose an existing account.

4. Choose the app that will run when the kiosk account signs in. Only apps that can run above the lock screen will be available in the list of apps to choose from. For more information, see Guidelines for choosing an app for assigned access. If you select Microsoft Edge as the kiosk app, you configure the following options:

   • Whether Microsoft Edge should display your website full-screen (digital sign) or with some browser controls available (public browser)
   • Which URL should be displayed when the kiosk accounts signs in
   • When Microsoft Edge should restart after a period of inactivity (if you select to run as a public browser)

5. Select Close.

To remove assigned access, select the account tile on the Set up a kiosk page, and then select Remove kiosk.

Instructions for Windows 10, version 1803 and earlier

When you set up a kiosk (also known as assigned access) in Settings for Windows 10, version 1803 and earlier, you must select an existing local standard user account. Learn how to create a local standard user account.

To set up assigned access in PC settings

1. Go to Start > Settings > Accounts > Other people.

2. Select Set up assigned access.

3. Choose an account.

4. Choose an app. Only apps that can run above the lock screen will be available in the list of apps to choose from. For more information, see Guidelines for choosing an app for assigned access.

5. Close Settings – your choices are saved automatically, and will be applied the next time that user account logs on.

To remove assigned access, choose Turn off assigned access and sign out of the selected account.

Set up a kiosk using Windows PowerShell

App type: UWP

OS edition: Windows 10 Pro, Ent, Edu

Account type: Local standard user

You can use any of the following PowerShell cmdlets to set up assigned access on multiple devices.

Before you run the cmdlet:

1. Log in as administrator.
2. Create the user account for Assigned Access.
3. Log in as the Assigned Access user account.
4. Install the Universal Windows app that follows the assigned access/above the lock guidelines.
5. Log out as the Assigned Access user account.
6. Log in as administrator.

To open PowerShell on Windows 10, search for PowerShell and find Windows PowerShell Desktop app in the results. Run PowerShell as administrator.

Configure assigned access by AppUserModelID and user name

Configure assigned access by AppUserModelID and user SID

Configure assigned access by app name and user name

Configure assigned access by app name and user SID

Note

To set up assigned access using -AppName, the user account that you specify for assigned access must have logged on at least once.

Microsoft Remote Desktop App Settings

Learn how to get the AUMID.

Learn how to get the AppName (see Parameters).

To remove assigned access, using PowerShell, run the following cmdlet.

Set up a kiosk using the kiosk wizard in Windows Configuration Designer

App type: UWP or Windows desktop application

OS edition: Windows 10 Pro (version 1709 and later) for UWP only; Ent, Edu for both app types

Account type: Local standard user, Active Directory

Important

When Exchange Active Sync (EAS) password restrictions are active on the device, the autologon feature does not work. This behavior is by design. For more informations, see How to turn on automatic logon in Windows.

When you use the Provision kiosk devices wizard in Windows Configuration Designer, you can configure the kiosk to run either a Universal Windows app or a Windows desktop application.

Install Windows Configuration Designer, then open Windows Configuration Designer and select Provision kiosk devices. After you name your project, and click Next, configure the settings as shown in the following table.

Note

If you want to use the advanced editor in Windows Configuration Designer, specify the user account and app (by AUMID) in Runtime settings > AssignedAccess > AssignedAccessSettings

Important

When you build a provisioning package, you may include sensitive information in the project files and in the provisioning package (.ppkg) file. Although you have the option to encrypt the .ppkg file, project files are not encrypted. You should store the project files in a secure location and delete the project files when they are no longer needed.

Set up a kiosk or digital sign using Microsoft Intune or other MDM service

App type: UWP

OS edition: Windows 10 Pro (version 1709), Ent, Edu

Account type: Local standard user, Azure AD

Microsoft Intune and other MDM services enable kiosk configuration through the AssignedAccess configuration service provider (CSP). Assigned Access has a KioskModeApp setting. In the KioskModeApp setting, you enter the user account name and the AUMID for the app to run in kiosk mode.

Tip

Starting in Windows 10, version 1803, a ShellLauncher node has been added to the AssignedAccess CSP.

To configure a kiosk in Microsoft Intune, see Windows 10 and Windows Holographic for Business device settings to run as a dedicated kiosk using Intune. For other MDM services, see the documentation for your provider.

Sign out of assigned access

To exit the assigned access (kiosk) app, press Ctrl + Alt + Del, and then sign in using another account. When you press Ctrl + Alt + Del to sign out of assigned access, the kiosk app will exit automatically. If you sign in again as the assigned access account or wait for the login screen timeout, the kiosk app will be re-launched. The assigned access user will remain signed in until an admin account opens Task Manager > Users and signs out the user account.

If you press Ctrl + Alt + Del and do not sign in to another account, after a set time, assigned access will resume. The default time is 30 seconds, but you can change that in the following registry key:

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionAuthenticationLogonUI

To change the default time for assigned access to resume, add IdleTimeOut (DWORD) and enter the value data as milliseconds in hexadecimal.

Setting up a remote desktop allows you to access your computer wherever you are and control it as if you were directly in front of the keyboard. By using the built-in Remote Desktop Connection app in Windows 10, you can troubleshoot issues, access files, and so much more. Here’s how to set up a remote desktop in Windows 10 and how to remotely access another computer over the internet.

How to Set Up Remote Desktop Windows 10

To set up a remote desktop in Windows 10, go to Settings > System > Remote Desktop. Then turn on the slider for Enable Remote Desktop. Next, search Settings for Allow an app through Windows firewall and enable the Remote Desktop app for Private and Public.

Note: You can only run the Remote Desktop Connection app if you are using Windows 10 Professional or Enterprise. If you are using Windows 10 Home edition, check out our guide on how to use Quick Assist to remotely control a computer.

1. Click the Windows Start button. This is the button with the Windows logo in the bottom-left corner of your screen. Do this from the host computer (or the computer you will be trying to access remotely).
2. Then click Settings. This is the gear-shaped icon just above the power button.
3. Next, click System.
4. Then click Remote Desktop in the left sidebar. You can find this by scrolling down. It is the icon that looks like greater than and less than signs pointing at each other.
5. Next, click the slider next to Enable Remote Desktop. This will cause a new window to pop up.
6. Then click Confirm. A pop-up box appears asking you if you would like to enable remote desktop. It also reminds you that doing so will allow you and other users in your User accounts to connect to the PC remotely. Then you will need to change your firewall settings in order to access another computer over the internet.
7. Next, type firewall into the search bar of the Settings window. You can do this by clicking the search box that says Find a setting at the top of the left sidebar. Once you type firewall, you will see search results populated under the search bar.
8. Then choose Allow an app through Windows firewall. If you don’t see this option, click Show All, and then select it from the list.
9. Then click Change settings. Initially, the apps and the checkboxes beside them will be grey or disabled. Once you click Change settings, they will turn black and become enabled.
10. Tick the Private and Publiccheckboxes to the right of Remote Desktop. Make sure both that the boxes under the Private and Public columns are checked.
11. Finally, click OK.

Once you enable your remote desktop and allow the app to communicate through your firewall, you can access that computer over the internet. Here’s how:

How to Remotely Access Another Computer Over the Internet

There are two ways you can remotely access another computer over the internet – depending on whether you’re on the same network or not. If you are accessing another computer within the same network, you just need to know the PC name. If otherwise, you need to know your public IP and set up port forwarding.

Microsoft Remote Desktop App Android Setup

How to Remotely Access Another Computer Over the Internet Within Your Network

To remotely access another computer within your network over the internet, open the Remote Desktop Connection app and enter that computer’s name, and your username and password.

Microsoft Remote Desktop App Setup Mac

1. Click the magnifying glass icon in the bottom-left corner of your screen. Do this from the computer you want to access over the internet.
2. Then type About into the search bar and click Open.
3. Next, copy your computer’s name. You can find this next to Device name. You can either write this name down, or copy and paste it into a text document, an email, or any other method that you want.

   Note: If this name is too complicated, you can click the Rename this PC button below. This lets you choose your own name for your PC.

4. Then open the Windows search bar and type remote desktop connection. This is the magnifying glass icon in the bottom-left corner of your screen.Do this from the client computer or the computer that you will use to establish the remote connection.
5. Next, click Open.
6. Then click Show Options. You can see this in the bottom-left corner of the window.
7. Next, enter the computer’s name. This is the name that you copied down in the previous steps.
8. Also, enter the username. If this information is filled in already, make sure it is correct. You can find your username by going to Settings > Accounts. Then you will see your username under your profile image.
9. Then click Connect.

   Note: You can also change additional settings by clicking the Display, Local Resources, Experience, and Advanced tabs.

10. Next, enter your computer’s password and click OK. This is the password that you use to sign in to the computer when you are on the lock screen.

    Note: You might encounter a prompt asking you if you want to connect even if the identity of the remote computer cannot be identified. Just click on Yes.

11. Finally, wait for the remote connection to be configured. After the step above, you will see a green progress bar. Wait for it to complete. Briefly, you will see a black window which turns to blue. Once the remote connection is successfully established, you will see a view of the computer you’re trying to access.

How to Remotely Access Another Computer Outside Your Network

1. Open a web browser. Do this from the host computer or the computer you will be trying to access remotely.
2. Then type what is my IP into the address bar.
3. Next, copy the public IP address listed. Your public IP address will be a series of numbers separated by periods.

   Note: Do not share your public IP address with anyone you don’t trust. They can use this information to hack your computer and steal your personal information, such as bank details.

4. Then open TCP port 3389 on your router. If you don’t know how to do this, check out our step-by-step guide on how to port forward.

   Note: You should also set a static IP address for the computer you are trying to access. If you want to know how to set a static IP address for your Windows 10 PC, check out our step-by-step guide here.

5. Next, open the Remote Desktop Connection app. Do this from the client computer (or the one you will use to remotely control the host computer).
6. Enter your public IP address in the Computer field. This will be the public IP address you copied down earlier.
7. Then click Connect.
8. Enter your credentials. On the Windows Security page, type in the username and password of your remote server.
9. Click OK.

   Note: You might encounter a prompt asking you if you want to connect even if the identity of the remote computer cannot be identified. Just click on Yes.

10. Finally, wait for the remote connection to be configured. After the step above, you will see a green progress bar. Wait for it to complete. Briefly, you will see a black window which turns to blue. Once the remote connection is successfully established, you will see a view of the computer you’re trying to access.

If you’re looking for a less complicated way of accessing your computer remotely, check out our article on how to remotely control a Windows 10 or Mac computer.