Windows 8.1 contains a new feature called Assigned Access, which is designed to allow administrators to quickly create an account that has access to only one Modern UI app. In this Ask the Admin, I’ll show you how to enable a local account for Assigned Access.
A kiosk PC is used when you want to give access to only a limited range of applications, or usually just one application, without exposing users to all the complexities and features of the Windows operating system. This is especially important for preventing malicious users from changing the configuration of the kiosk PC and to prevent it from easily becoming infected with malware.
Assigned Access in Windows 8.1 makes it easy to configure a local account so that a PC can be set up with access to only one Modern UI app. When logged on with an account configured for Assigned Access, users will only be able to access the assigned Modern UI app, and cannot launch File Explorer, the control panel, the desktop, or Task Manager.
Before you start, you’ll need to have a local account on the PC ready for Assigned Access. It should be a standard user account, i.e. not a member of the local Administrators group, and you need to log on to the account at least once, and if necessary, install the Modern UI app that you want to give access to. If you skip the last step, you’ll only be able to choose from the preinstalled Microsoft apps that come bundled with Windows 8.1.
While the instructions in the Assigned access dialog say that you must restart the PC for the new settings to take effect, I didn’t find that was necessary. I was able to log on to the User account and the Finance app I selected started automatically, and I wasn’t able to access the Start screen or desktop. To log off an account that has been configured for Assigned Access, press the Windows key quickly five times.