At one time or another, you have probably thought about setting up a PC to work like a kiosk, where the PC is locked down
so a user can only perform a single function. While it’s possible to do so in versions of Windows prior to 8.1, it involves editing the registry and dedicating the PC solely to the task of working as a kiosk.
Windows 8.1‘s new Assigned Access feature allows you to configure a local user account to essentially function in kiosk mode, and it doesn’t even require you to edit the registry or dedicate a PC to the task. Once
you configure an Assigned Access account, a user signed on to that account only
has access to the one Modern app that you specify — the user cannot run any other
application or make any changes to the operating system. Other users can
sign on to the computer and have full access to Windows 8.1.
In this article, I show how to set up Windows 8.1’s
Assigned Access feature. This feature is only available in Windows 8.1 RT, Pro, and Enterprise.
An example situation
A client who runs a real estate
agency wanted to set up a PC in the waiting/conference room for their
customers to scout out neighborhoods where homes were for sale. After doing
some research, we decided on a Dell Inspiron One 23 all-in-one PC with a 23-inch touch screen and Windows 8.1
Pro. I then set up an Assigned Access account and assigned it access to the
Microsoft Bing Maps app.
In addition to allowing customers to use the PC as a kiosk
with the Maps app, real estate agents could sign in with their user accounts
and have access to the full operating system so they could perform other
Create a local account
The Assigned Access account
must be a local account. Creating a user account in Windows 8.1 is a bit
different because Microsoft moved the capability from the User Accounts tool in
Control Panel to the PC Settings in the modern UI. Fortunately, creating a
local account in Windows 8.1 is a fairly straightforward operation in the new
PC Settings interface.
To begin, point to the lower-right corner of the screen until
the Charms bar appears and then, click Settings. When the Settings
bar appears, click Change PC Settings (Figure A).
Once you access the Charms bar, you can get to the Change PC Settings
In a moment, you’ll see the PC Settings bar slide out, and you’ll select the Accounts command. When the Accounts window appears, select
Other Accounts from the menu and then click Add An Account under Manage Other Accounts (Figure B).
From PC settings, you’ll access the Accounts tool where you can add a
When you add an account in Windows 8.1, you’ll be prompted to set up a new user account using an email address as a username.
However, if you look toward the bottom of the screen, you’ll see a link
titled Sign In Without A Microsoft Account (Not Recommended). Click the link, and the Add A User screen will appear. You’re encouraged to create a Microsoft Account, but you should select the Local Account button instead (Figure C).
Microsoft makes it a bit tricky to create a local account.
You’ll be prompted to enter a username, a password, and a password
hint. Then, you’ll click the Next button and click the Finish button to complete the procedure.
Log in to the local account
You need to
log in to the new local account at least once in order to be able to set it up with
Assigned Access. When you do, Windows will set up the account and install all
of the base apps. If you don’t log in, you won’t be able to select any apps for
the Assigned Access.
Once you log in, you’ll have to install the app
that you want to use for Assigned Access. In the case of my example situation,
I’m using the Microsoft Bing Maps app, which is installed by default.
Configure Assigned Access
After you create a local account and log in to it
once, you’re ready to configure Assigned Access. When you return to the Accounts
screen, you’ll select the Set Up An Account For Assigned Access link (Figure D).
After you log in to your local account, you can make it into an
Assigned Access account.
The Assigned Access screen will prompt you to choose an account and an app. To begin, click the Choose An Account icon; you’ll see a popup that displays the local account that you just set up — select that account. Next, click the Choose An App icon, and you can select
any of the available apps. These steps are illustrated in
From the Assigned Access screen, you’ll choose a local account and a
When you’re finished, you’ll see your Assigned Access
account. (In the case of my example, my Assigned Access account looks like the
one in Figure F.) Then, you can close the Accounts app window.
For my Assigned Access account, I selected the Microsoft Bing Maps app.
Work with an Assigned Access account
Now you can work with your Assigned Access
account. To begin, go to the Start screen, right-click your user account
pictures, and select the Assigned Access account. To continue with my example,
I select the Map Reader account (Figure G).
You’ll sign in to your Assigned Access account.
You’ll only see the app that you allocated
to your Assigned Access account — you won’t be able to access anything else, including the Start Screen or desktop. You’ll be able
to use all of the features that the app makes available, but that’s it.
When you’re finished using the app, you can walk away
from the PC, or you can sign off your Assigned Access account by pressing the Windows
key five times. When you do, you’ll find yourself at the Sign On screen, where you can sign back on to your real account or sign back in to your Assigned
It’s important to remember that when you sign off from an
Assigned Access account by pressing the Windows key five times the
account actually remains open. The Windows key procedure acts more like locking
Windows than signing off of the account.
If you want to close down the Assigned Access
account, you must do so from your real account. You need to access
Task Manager, select the Users tab, right-click the Assigned Access account,
and then select Sign Off (Figure H).
You’ll use Task Manager to really sign off your Assigned Access account.
At any time you can return to the Accounts app and change
your Assigned Access account. For instance, you can click the app icon and
select another app from the list. You can also convert your Assigned Access
account into a regular account — just select the account and then choose the Don’t Use Assigned Access command.
If you’re completely done with an Assigned Access account
and want to get rid of it, you need to go to the User Accounts tool in
Control Panel and use the Delete The Account command.
What’s your take?
Have you wanted to set up a PC as a kiosk? If so, what do
you think of Windows 8.1’s Assigned Access feature? If you have
comments or information to share about this topic, please drop
by our forums and let us hear from you.