The Complete Guide to Setting Up Windows Kiosk Mode Using MDM

What Is Windows Kiosk Mode? 

Windows Kiosk Mode allows you to lock down Windows devices to only one or a few essential applications, restricting users from accessing device settings, the start menu, and other files. Windows Kiosk Mode turns the device into a dedicated purpose device ideal for digital signage, self-checkouts, POS terminals, etc. 

Imagine walking into a hotel lobby, a retail store, or even a school hallway and seeing a screen that’s locked into a single or multiple apps— maybe it’s showing a directory, a survey form, a sign-in page, or an ordering system. That’s Windows Kiosk Mode in action. It's a streamlined, focused experience designed to do one thing — and do it well.

Sounds useful, right? Whether you're setting up an info display, a point-of-sale terminal, or a secure app experience for public use, kiosk mode helps you lock down the device and protect both users and data.

Here’s the twist: despite having many benefits, setting up and managing Windows Kiosk devices manually across multiple locations can be a real challenge. Between configuration quirks, system updates, and end-user interference, keeping things consistent and secure isn’t always easy. The solution to these challenges? SureMDM — the Mobile Device Management (MDM) solution from 42Gears.

SureMDM simplifies the entire process — from remotely configuring Windows devices into Kiosk Mode to pushing updates, monitoring device activity, and enforcing policies. Whether you're managing a handful of kiosks or thousands across multiple locations, SureMDM gives you the control and flexibility you need.

How to Set up Windows Kiosk Mode using MDM?

There are multiple ways to configure Windows Kiosk Mode using SureMDM: 

1. Configuring Windows Kiosk Mode Using SureLock (Standalone App)

SureLock by 42Gears helps convert your Windows device into a secure, dedicated-purpose kiosk by restricting access to only approved applications. Here’s how to get started:

• Download and install SureLock from the official 42Gears website, then launch the application.
• In the setup wizard, enable options like Disable UAC Prompt and Autologin on Boot, then tap Start Kiosk.
• Confirm the reboot prompt; the device will restart and load the SureLock Home Screen automatically.
• Tap 5 times on the SureLock Home Screen to enter the admin menu, then go to Allowed Applications and add the apps you want users to access.
• Tap Done to finalize the setup; the device is now in kiosk mode and only shows the allowed applications.

Learn more about configuring Windows Kiosk Mode Using SureLock

2. Configuring Windows Kiosk Mode Using SureLock Inside SureMDM

SureMDM allows you to enable SureLock directly through the SureMDM Agent, eliminating the need to configure it separately. This simplifies the process of configuring Windows Kiosk Mode by using just one tool. There are two ways in which you could activate SureLock inside SureMDM: 

• Option 1: Per-Device Activation – Open the device enrolled on SureMDM console, go to Dynamic Job SureLock, and enable the desired settings.
• Option 2: Bulk Device Activation – Create a Static Job with desired SureLock configuration and experience. 
• Apply the job to target devices from the SureMDM console; SureLock will activate with the configured restrictions, enabling kiosk mode.

Learn more about configuring Windows Kiosk Mode Using SureLock Inside SureMDM

3. How to Set Up Windows Kiosk Mode Using SureMDM Kiosk Profile

SureMDM lets IT admins configure Windows devices in Single-App or Multi-App kiosk mode, ensuring users access only approved applications.

• Log into the SureMDM web console and ensure the Windows device is enrolled via Windows EMM or Dual Enrolled.
• Go to Profiles > Windows > Add, enter a profile name, select Kiosk Profile, and click Configure.
  • Single App Mode
    • For Single-App mode, choose Single app, Full-screen kiosk under Kiosk Mode.
    • Select Auto Logon or Local user account, then provide the User Logon Name and Store App ID (AUMID).
  • Multi-App Kiosk Mode
    • For Multi-App mode, choose Multiple app kiosks from the Kiosk Mode dropdown.
    • Select Auto Logon or Local user account as the login type.
    • Click Add to configure apps; choose Store app or Win32 app, then enter the Application Name, AUMID, and Executable Path (for Win32 apps).
• Use Get-StartApps in PowerShell to retrieve AUMID for installed apps that are not pre-populated in SureMDM.
• Optional: Enable Show Windows Taskbar and Allow Access to Downloads Folder if needed.
• Save the profile and push it to the target devices to activate kiosk mode.

Learn more about configuring Windows Kiosk Mode Using SureMDM Kiosk Profile.

Key Features of SureMDM Windows Kiosk Mode

1. Single-App Kiosk Mode

• Lock the device to one full-screen app (UWP or Win32).
• Prevent users from closing, switching, or minimizing the app.

2. Multi-App Kiosk Mode

• Allow access to a predefined set of apps via a custom Start menu.
• Users are still restricted from accessing desktop or system settings.

3. Auto-Launch at Startup

• Kiosk app launches immediately after device boot.
• No user interaction needed — perfect for public setups.

4. Remote Management Support

• Can be configured via SureMDM.
• Ideal for deploying and managing at scale across many devices.

5. Kiosk Browser

• Limit web access to work-related/essential websites and real-time keyword filtering
• Block distracting content and potential malware downloads 

6. Kiosk Analytics and Custom Branding

• Gain insights into app usage and browsing activity to monitor usage and enforce security policies effectively.
• Personalize the kiosk mode by setting a custom wallpaper that aligns with your brand identity.

Real-World Examples of Windows Kiosk Mode in Action

• Retail: Tablets used by customers to check inventory, sign up for loyalty programs, or place orders.
• Healthcare: Patient check-in stations at clinics or hospitals.
• Education: Locked-down computers used for testing or interactive learning stations.
• Corporate: Visitor management systems at office entrances.
• Transportation: Information screens at train stations or airports.

Why Use SureMDM for Windows Kiosk Mode?

Microsoft does provide native tools like Assigned Access via PowerShell, Group Policy, and Windows Configuration Designer, but they often require manual setup or scripting knowledge. For organizations looking to streamline deployments and manage devices remotely at scale, SureMDM adds tremendous value:

• 🚀 Quick and Centralized Deployment – Push kiosk mode profiles to any number of Windows devices remotely.
  
• 🔐 Enhanced Security – Lock down settings, disable unwanted features, and prevent tampering.
  
• 🧰 Support for Legacy (Win32) and Modern (UWP) Apps – Choose what works best for your environment.
  
• 📡 Real-time Monitoring – Track device status, usage, and troubleshoot issues from a central console.
  
• 🔁 Scalability – Easily replicate kiosk setups across multiple devices or locations.
  
• 🖥️ Remote Control – Troubleshoot the devices remotely instead of physically attending to the malfunctioned devices, saving both time and operational costs. 

Whether you're running a school with exam terminals, managing tablets in a hospital, or setting up product demo stations in retail outlets — SureMDM makes it easy to lock down, monitor, and manage your Windows kiosks with confidence.

FAQs:

How does Kiosk Mode work on Windows 11?

Businesses can set up Kiosk Mode on Windows 11 by using an MDM solution like SureMDM. Admins can configure either a single app to launch in full-screen mode or multiple apps shown on the home screen. SureMDM also offers advanced remote management and security features.

Is there any software to simplify Windows Kiosk Mode setup?

Yes. SureMDM by 42Gears is a reliable Windows Kiosk software that simplifies the entire process. It allows remote deployment, monitoring, updating, and managing of Windows Kiosk devices using an intuitive web-based console.

What are the benefits of using Kiosk Mode on Windows 11?

• Restricts user access to only necessary applications
• Enhances device and data security
• Reduces maintenance and user errors
• Ideal for public-facing devices (retail, healthcare, education, etc.)

Can I manage Windows Kiosk devices at scale?

Yes, SureMDM is designed for scalability, allowing you to deploy and manage thousands of Kiosk devices across locations — all from a single platform.

What does Windows Kiosk Mode do?

Windows Kiosk Mode locks a device to a single app or a limited set of apps, hiding the Start menu and system settings. It’s designed for public or business use—like POS systems, digital signage, or check-in stations—providing a secure, focused, and tamper-proof experience.

How secure is Windows Kiosk Mode?

Windows Kiosk Mode with SureMDM offers a high level of security by locking devices into single application or multiple applications and preventing unauthorized access to system settings, files, and features. SureMDM allows IT admins to remotely enforce security policies, disable hardware buttons, block unauthorized websites, and monitor device activity in real time. 

What are the best practices for Kiosk Mode on Windows 11 devices?

To ensure secure, reliable, and scalable kiosk deployments on Windows 11 using SureMDM, follow these best practices:

• Use SureMDM Kiosk Profiles: Create Single-App or Multi-App Kiosk profiles within SureMDM for consistent device lockdown.
• Enable Auto-Logon and App Auto-Launch: Configure auto-logon and set kiosk apps to launch automatically at startup to ensure a seamless user experience.
• Restrict Hardware Access: Lockdown devices to allow only approved apps, and block user access to settings.
• Apply Policies Remotely: Push security configurations (like disabling USB ports or taskbar access) across all devices using dynamic or static jobs.
• Leverage Analytics and Reporting: Track usage, app activity, and compliance with built-in kiosk analytics to optimize performance and security.

These practices help IT teams ensure devices remain secure, consistent, and centrally managed with minimal hands-on effort.