Deploy Microsoft Edge kiosk mode

Applies to: Microsoft Edge on Windows 10, version 1809

In the Windows 10 October 2018 Update, we added Microsoft Edge kiosk mode which works with assigned access, locking down a Windows 10 device to only run a single application or multiple applications. It also prevents access to the file system and running executables or other apps from Microsoft Edge. Assigned access lets IT administrators create a tailored browsing experience designed for kiosk devices. Learn more about assigned access.

Microsoft Edge kiosk mode supports four configurations types. For example, you can configure Microsoft Edge to load only a single URL in full-screen mode when you configure digital/interactive signage on a single-app kiosk device.

In addition to digital/interactive signage, you can configure Microsoft Edge kiosk mode for public browsing either on a single or multi-app kiosk device. The public browsing kiosk types run Microsoft Edge InPrivate mode to protect user data with a browsing experience designed for public kiosks. For example, the Microsoft Edge Settings are disabled, favorites, extensions, and books are unavailable to prevent users from customizing Microsoft Edge.

In single-app public browsing, there is an “End session” button and reset after an idle timeout option. Both restart Microsoft Edge and clear the user’s session. The reset after the idle timer is set to 5 minutes by default, but you can choose a value of your own.

In this topic, you learn about the different Microsoft Edge kiosk mode types to help you determine what configuration is best suited for your kiosk device. You also learn how to set up your Microsoft Edge kiosk mode experience. Learn more about Configuring kiosk and shared devices running Windows desktop editions.

Microsoft Edge kiosk types

Microsoft Edge kiosk mode supports four configuration types that depending on how Microsoft Edge is set up with assigned access. Two for single-app kiosk devices (Digital/Interactive signage and Public browsing) and two for multi-app kiosk devices (Public browsing and Normal mode).

Single app

When you set up Microsoft Edge kiosk mode in single-app assigned access, Microsoft Edge runs InPrivate either in full-screen or a multi-tab version designed for public browsing. For more details about setting up a single-app kiosk, see Set up a kiosk or digital signage on Windows 10 Pro, Enterprise, or Education.

The single-app Microsoft Edge kiosk mode types are:

  1. Digital / Interactive signage devices display a specific site in full-screen mode that runs InPrivate browsing mode.

    • Digital signage does not require user interaction and best used for a rotating advertisement or menu.

    • Interactive signage, on the other hand, requires user interaction within the page but doesn’t allow for any other uses, such as browsing the internet. Use interactive signage for things like a building business directory or restaurant order/pay station.

  2. Public browsing runs Microsoft Edge InPrivate mode to protect user data with a browsing experience designed for publicly accessible kiosk devices. For example, the Microsoft Edge Settings are disabled, favorites, extensions, and books are unavailable to prevent users from customizing Microsoft Edge. Users can’t minimize, close or open a new Microsoft Window. Microsoft Edge is the only app users can use on the device.

    The single-app public browsing mode is the only kiosk mode that has an ‘End session’ button that users click to end the browsing session and an idle timer that resets the session after a specified time of user inactivity. Both restart Microsoft Edge and clear the user’s session, including any downloads.

    A public library or hotel concierge desk are two examples of public browsing that restricts access to only Microsoft Edge.

    Public browsing Microsoft Edge kiosk mode on a single-app kiosk device

Multi-app

Microsoft Edge two kiosk mode in multi-app assigned access runs InPrivate mode and a regular browsing version. For more details about running a multi-app kiosk, or fixed-purpose device, see Create a Windows 10 kiosk that runs multiple apps.

Here you learn how to create kiosks that run more than one app and the benefits of a multi-app kiosk, or fixed-purpose device.

The multi-app Microsoft Edge kiosk mode types include:

  1. Public browsing, which is similar to the single-app version, runs Microsoft Edge InPrivate mode to protect user data with a browsing experience designed for publicly accessible kiosk devices running more than one application.

    Users can open and close Microsoft Edge and launch other apps if allowed by assigned access. Instead of an “End session” button to clear their browsing session, the user closes Microsoft Edge normally.

    In this configuration, Microsoft Edge can interact with other applications. For example, if Internet Explorer 11 is set up in multi-app assigned access, you can enable Enterprise Mode to automatically switch users to Internet Explorer 11 for sites that need backward compatibility support.

    A public library or hotel concierge desk are two examples of public browsing that provides access to Microsoft Edge and other apps.

    Public browsing Microsoft Edge kiosk mode on a multi-app kiosk device

  2. Normal mode provides all the Microsoft Edge browsing features and preserves the user data and state between sessions.

    Some features may not work depending on what other apps you have configured in assigned access. For example, installing extensions or books from the Microsoft store are not allowed if the store is not available. If Internet Explorer 11 is set up in assigned access, you can enable Enterprise Mode to automatically switch users to Internet Explorer 11 for sites that need backward compatibility support.

    Normal Microsoft Edge kiosk mode on a multi-app kiosk device

Let’s get started!

Before you can configure Microsoft Edge kiosk mode, you must set up Microsoft Edge in assigned access. With assigned access, you restrict a local standard user account so that it only has access to one or more Windows app, such as Microsoft Edge in kiosk mode. You can set up Microsoft Edge kiosk mode in assigned access using:

  • Windows Settings. Use to set up a couple of single-app kiosk devices. If you hit the Windows key and type “kiosk” you can set up Microsoft Edge kiosk mode for a single-app (Digital / Interactive signage or Public browsing) experience and define a single URL for the Home button, Start page, and New Tab page. You can also set the reset after an idle timeout.

    Important

    Do not use the Windows 10 Settings to configure multi-app kiosks.

  • Microsoft Intune or other MDM service. Use to set up several single-app and multi-app kiosk devices. Microsoft Intune and other MDM service providers offer more options for customizing the Microsoft Edge kiosk mode experience by using the [supported or available] Microsoft Edge policies. For a list of supported policies see Supported policies for kiosk mode.

    Note

    For other MDM service, check with your provider for instructions.

Prerequisites

  • Microsoft Edge on Windows 10, version 1809 (Professional, Enterprise, and Education).

  • Configuration and deployment service, such as Microsoft Intune or other MDM service. With these methods, you must have the AppUserModelID (AUMID) to set up Microsoft Edge:

    Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge

Use Windows Settings

Windows Settings is the simplest and easiest way to set up one or a couple of devices because you perform these steps physically on each device. This method is ideal for small businesses.

When you set up a single-app kiosk device using Windows Settings, you must first set up assigned access before configuring the device. With assigned access, you restrict a local standard user account so that it only has access to one Windows app, such as Microsoft Edge in kiosk mode.

  1. In the search field of Windows Settings, type kiosk and then select Set up a kiosk (assigned access).

  2. On the Set up a kiosk page, click Get started.

  3. Type a name to create a new account, or you can choose an existing account and click Next.

  4. On the Choose a kiosk app page, select Microsoft Edge and then click Next.

  5. Select how Microsoft Edge displays when running in kiosk mode:

    • As a digital sign or interactive display, the default URL shows in full screen, without browser controls.

    • As a public browser, the default URL shows in a browser view with limited browser controls.

  6. Select Next.

  7. Type the URL to load when the kiosk launches.

    Note

    The URL sets the Home button, Start page, and New Tab page.

  8. Accept the default value of 5 minutes for the idle time or provide a value of your own.

    Tip

    Microsoft Edge kiosk mode has a built-in timer to help keep data safe in public browsing sessions. When the idle time (no user activity) meets the time limit, a confirmation message prompts the user to continue. If the user does not Continue, Microsoft Edge resets to the default URL.

  9. Click Next.

  10. Close the Settings window to save and apply your choices.

  11. Once you've configured the policies, restart the kiosk device and sign in with the local kiosk account to validate the configuration.

Congratulations! You’ve just finished setting up Microsoft Edge in assigned access, a kiosk or digital sign, and configured Microsoft Edge kiosk mode.

Next steps.

If you want to... Then...
Use your new kiosk Sign into the device with the kiosk account that you selected to run Microsoft Edge kiosk mode.
Make changes to your kiosks such as change the display option or the URL that loads
  1. In Windows Settings, type kiosk in the search field and select Set up a kiosk (assigned access).
  2. On the Set up a kiosk page, make your changes to Choose a kiosk mode and Set up Microsoft Edge.

Use Microsoft Intune or other MDM service

With this method, you can use Microsoft Intune or other MDM services to configure Microsoft Edge kiosk mode in assigned access and how it behaves on a kiosk device.

Important

If you are using a local account as a kiosk account in Microsoft Intune or a provisioning package, make sure to sign into this account and then sign out before configuring the assigned access single-app kiosk.

  1. In Microsoft Intune or other MDM service, configure AssignedAccess to prevent users from accessing the file system, running executables, or other apps.

  2. Configure the following MDM settings to setup Microsoft Edge kiosk mode on the kiosk device and then restart the device.

    ConfigureKioskMode

    Configure the display mode for Microsoft Edge as a kiosk app.

    URI full path: ./Vendor/MSFT/Policy/Config/Browser/ConfigureKioskMode

    Data type: Integer

    Allowed values:

    • Single-app kiosk experience
      • 0 - Digital signage and interactive display
      • 1 - InPrivate Public browsing
    • Multi-app kiosk experience
      • 0 - Normal Microsoft Edge running in assigned access
      • 1 - InPrivate public browsing with other apps
    ConfigureKioskResetAfterIdleTimeout

    Change the time in minutes from the last user activity before Microsoft Edge kiosk mode resets to the default kiosk configuration.

    URI full path: ./Vendor/MSFT/Policy/Config/Browser/ConfigureKioskResetAfterIdleTimeout

    Data type: Integer

    Allowed values:

    • 0 - No idle timer
    • 1-1440 (5 minutes is the default) - Set reset on idle timer
    HomePages

    Set one or more start pages, URLs, to load when Microsoft Edge launches.

    URI full path: ./Vendor/MSFT/Policy/Config/Browser/HomePages

    Data type: String

    Allowed values:

    Enter one or more URLs, for example,
       <https://www.msn.com><https:/www.bing.com>

    ConfigureHomeButton

    Configure how the Home Button behaves.

    URI full path: ./Vendor/MSFT/Policy/Config/Browser/ConfigureHomeButton

    Data type: Integer

    Allowed values:

    • 0 (default) - Not configured. Show home button, and load the default Start page.
    • 1 - Enabled. Show home button and load New Tab page
    • 2 - Enabled. Show home button & set a specific page.
    • 3 - Enabled. Hide the home button.
    SetHomeButtonURL

    If you set ConfigureHomeButton to 2, configure the home button URL.

    URI full path: ./Vendor/MSFT/Policy/Config/Browser/SetHomeButtonURL

    Data type: String

    Allowed values: Enter a URL, for example, https://www.bing.com

    SetNewTabPageURL

    Set a custom URL for the New Tab page.

    URI full path: ./Vendor/MSFT/Policy/Config/Browser/SetNewTabPageURL

    Data type: String

    Allowed values: Enter a URL, for example, https://www.msn.com


Congratulations! You’ve just finished setting up a kiosk or digital signage and configuring group policies for Microsoft Edge kiosk mode using Microsoft Intune or other MDM service.

Next steps. Use your new kiosk. Sign in to the device using the user account that you selected to run the kiosk app.


Microsoft Edge kiosk mode policies

We added new Microsoft Edge policies to configure the kiosk mode type as well as the idle timer. For these policies to work correctly, you must set up Microsoft Edge in assigned access.

Configure kiosk mode

Supported versions: Microsoft Edge on Windows 10, version 1809
Default setting: Not configured

Configure how Microsoft Edge behaves when it’s running in kiosk mode with assigned access, either as a single-app or as one of many apps running on the kiosk device. You can control whether Microsoft Edge runs InPrivate full screen, InPrivate multi-tab with a tailored experience for kiosks, or normal browsing in Microsoft Edge.

For this policy to work, you must configure Microsoft Edge in assigned access; otherwise, Microsoft Edge ignores the settings in this policy. To learn more about assigned access and kiosk configuration, see Configure kiosk and shared devices running Windows desktop editions.

Supported values

(0) Default or not configured
  • If it’s a single app, Microsoft Edge runs InPrivate full screen for digital signage or interactive displays.
  • If it’s one of many apps, Microsoft Edge runs as normal.
(1) Enabled
  • If it’s a single app, it runs InPrivate with a tailored experience for kiosks and is the only app available for public browsing. Users can’t minimize, close, or open windows or customize Microsoft Edge, but can clear browsing data and downloads and restart by clicking “End session.” You can configure Microsoft Edge to restart after a period of inactivity by using the “Configure kiosk reset after idle timeout” policy.

    For single-app public browsing: If you do not configure the Configure kiosk reset after idle timeout policy and you enable this policy, Microsoft Edge kiosk resets after 5 minutes of idle time.

  • If it’s one of many apps, it runs InPrivate with multi-tabs for public browsing with other apps. Users can minimize, close, and open multiple InPrivate windows, but they can’t customize Microsoft Edge.

Microsoft Edge kiosk experience

ADMX info and settings

ADMX info

  • GP English name: Configure kiosk mode
  • GP name: ConfigureKioskMode
  • GP element: ConfigureKioskMode_TextBox
  • GP path: Windows Components/Microsoft Edge
  • GP ADMX file name: MicrosoftEdge.admx

MDM settings

  • MDM name: Browser/ConfigureKioskMode
  • Supported devices: Desktop
  • URI full path: ./Vendor/MSFT/Policy/Config/Browser/ConfigureKioskMode
  • Data type: Integer

Registry settings

  • Path: HKLM\Software\Policies\Microsoft\MicrosoftEdge\KioskMode
  • Value name: ConfigureKioskMode
  • Value type: REG_SZ

Configure kiosk reset after idle timeout: You can configure Microsoft Edge kiosk mode to reset to the configured start experience after a specified amount of idle time in minutes (0-1440). The reset timer begins after the last user interaction. Once the idle time meets the time specified, a confirmation message prompts the user to continue, and if no user action, Microsoft Edge kiosk mode resets after 30 seconds. Resetting to the configured start experience deletes the current user’s browsing data.

Deploy Microsoft Edge kiosk mode: Microsoft Edge kiosk mode works with assigned access to allow IT administrators, to create a tailored browsing experience designed for kiosk devices. In this deployment guidance, you learn about the different Microsoft Edge kiosk mode types to help you determine what configuration is best suited for your kiosk device. You also learn about the other group policies to help you enhance the how to set up your Microsoft Edge kiosk mode experience.


Configure kiosk reset idle timeout

Supported versions: Microsoft Edge on Windows 10, version 1809
Default setting: 5 minutes

You can configure Microsoft Edge kiosk mode to reset to the configured start experience after a specified amount of idle time in minutes (0-1440). The reset timer begins after the last user interaction. Once the idle time meets the time specified, a confirmation message prompts the user to continue, and if no user action, Microsoft Edge kiosk mode resets after 30 seconds. Resetting to the configured start experience deletes the current user’s browsing data.

You must set the Configure kiosk mode policy to enabled (1 - InPrivate public browsing) and configure Microsoft Edge as a single-app in assigned access for this policy to take effect; otherwise, Microsoft Edge ignores this setting. To learn more about assigned access and kiosk configuration, see Configure kiosk and shared devices running Windows desktop editions.

Supported values

  • Any integer from 1-1440 (5 minutes is the default) – The time in minutes from the last user activity before Microsoft Edge kiosk mode resets to the default kiosk configuration. A confirmation dialog displays for the user to cancel or continue and automatically continues after 30 seconds.

  • 0 – No idle timer.

ADMX info and settings

ADMX info

  • GP English name: Configure kiosk reset after idle timeout
  • GP name: ConfigureKioskResetAfterIdleTimeout
  • GP element: ConfigureKioskResetAfterIdleTimeout_TextBox
  • GP path: Windows Components/Microsoft Edge
  • GP ADMX file name: MicrosoftEdge.admx

MDM settings

  • MDM name: Browser/ConfigureKioskResetAfterIdleTimeout
  • Supported devices: Desktop
  • URI full path: ./Vendor/MSFT/Policy/Config/Browser/ConfigureKioskResetAfterIdleTimeout
  • Data type: Integer

Registry settings

  • Path: HKLM\Software\Policies\Microsoft\MicrosoftEdge\KioskMode
  • Value name:ConfigureKioskResetAfterIdleTimeout
  • Value type: REG_DWORD

Configure kiosk mode: Configure how Microsoft Edge behaves when it’s running in kiosk mode with assigned access, either as a single-app or as one of many apps running on the kiosk device. You can control whether Microsoft Edge runs InPrivate full screen, InPrivate multi-tab with a tailored experience for kiosks, or normal browsing in Microsoft Edge.

Deploy Microsoft Edge kiosk mode: Microsoft Edge kiosk mode works with assigned access to allow IT administrators, to create a tailored browsing experience designed for kiosk devices. In this deployment guidance, you learn about the different Microsoft Edge kiosk mode types to help you determine what configuration is best suited for your kiosk device. You also learn about the other group policies to help you enhance the how to set up your Microsoft Edge kiosk mode experience.


Supported policies for kiosk mode

Use any of the Microsoft Edge policies listed below to enhance the kiosk experience depending on the Microsoft Edge kiosk mode type you configure. To learn more about these policies, see Policy CSP - Browser.

MDM Setting Digital /
Interactive signage
Public browsing
single-app
Public browsing
multi-app
Normal
mode
AllowAddressBarDropdown Not supported Not supported Not supported Supported
AllowAutofill Not supported Not supported Not supported Supported
AllowBrowser Not supported Not supported Not supported Not supported
AllowConfigurationUpdateForBooksLibrary Not supported Not supported Not supported Supported
AllowCookies Supported Supported Supported Supported
AllowDeveloperTools Not supported Not supported Not supported Supported
AllowDoNotTrack Supported Supported Supported Supported
AllowExtensions Not supported Not supported Not supported Supported
AllowFlash Supported Supported Supported Supported
AllowFlashClickToRun Supported2 Supported Supported Supported
AllowFullscreen* Not supported Supported Supported Supported
AllowInPrivate Not supported Not supported Not supported Supported
AllowMicrosoftCompatibilityList Not supported Not supported Supported1 Supported
AllowPasswordManager Not supported Not supported Not supported Supported
AllowPopups Not supported Supported Supported Supported
AllowPrelaunch* Not supported Not supported Not supported Supported
AllowPrinting* Supported Supported Supported Supported
AllowSavingHistory* Not supported Not supported Not supported Supported
AllowSearchEngineCustomization Not supported Not supported Not supported Supported
AllowSearchSuggestionsinAddressBar Not supported Supported Supported Supported
AllowSideloadingExtensions* Not supported Not supported Not supported Supported
AllowSmartScreen Supported Supported Supported Supported
AllowSyncMySettings Not supported Not supported Not supported Supported
AllowTabPreloading* Not supported Not supported Not supported Supported
AllowWebContentOnNewTabPage* Not supported Not supported Not supported Supported
AlwaysEnabledBooksLibrary Not supported Not supported Not supported Supported
ClearBrowsingDataOnExit Not supported Not supported Not supported Supported
ConfigureAdditionalSearchEngines Not supported Supported Supported Supported
ConfigureFavoritesBar* Not supported Supported Supported Supported
ConfigureHomeButton* Supported Supported Supported Supported
ConfigureKioskMode* Supported Supported Supported Supported
ConfigureKioskResetAfterIdleTimeout* Not supported Supported Not supported Not supported
ConfigureOpenEdgeWith* Supported Supported Supported Supported
ConfigureTelemetryForMicrosoft365Analytics* Supported Supported Supported Supported
DisableLockdownOfStartPages Not supported Not supported Not supported Supported
Experience/DoNotSyncBrowserSettings* and Experience/PreventTurningOffRequiredExtensions* Not supported Not supported Not supported Supported
EnableExtendedBooksTelemetry Not supported Not supported Not supported Supported
EnterpriseModeSiteList Not supported Not supported Supported1 Supported
FirstRunURL Not supported Not supported Not supported Not supported
HomePages Supported Supported Supported Supported
LockdownFavorites Not supported Supported Supported Supported
PreventAccessToAboutFlagsInMicrosoftEdge Not supported Supported Supported Supported
PreventCertErrorOverrides* Supported Supported Supported Supported
PreventFirstRunPage Supported Supported Supported Supported
PreventLiveTileDataCollection Not supported Not supported Not supported Supported
PreventSmartScreenPromptOverride Supported Supported Supported Supported
PreventSmartScreenPromptOverrideForFiles Supported Supported Supported Supported
PreventTurningOffRequiredExtensions* Supported Supported Supported Supported
PreventUsingLocalHostIPAddressForWebRTC Supported Supported Supported Supported
ProvisionFavorites Not supported Supported Supported Supported
SendIntranetTraffictoInternetExplorer Not supported Not supported Supported1 Supported
SetDefaultSearchEngine Not supported Supported Supported Supported
SetHomeButtonURL* Not supported Supported Supported Supported
SetNewTabPageURL* Not supported Supported Supported Supported
ShowMessageWhenOpeningInteretExplorerSites Not supported Supported Supported1 Supported
SyncFavoritesBetweenIEAndMicrosoftEdge Not supported Not supported Supported1 Supported
UnlockHomeButton* Not supported Not supported Not supported Supported
UseSharedFolderForBooks Not supported Not supported Not supported Supported

* New policy as of Windows 10, version 1809.

1) For multi-app assigned access, you must configure Internet Explorer 11.
2) For digital/interactive signage to enable Flash, set AllowFlashClickToRun to 0.

Legend:

       Not supported = Not applicable or not supported
       Supported = Supported


  • Set up a kiosk or digital signage on Windows 10 Pro, Enterprise, or Education: Learn about the different methods to configuring your kiosks and digitals signs. Also, learn about the settings you can use to lock down the kiosk for a more secure kiosk experience.

  • Create a Kiosk Experience: Learn how to set up single-function kiosk devices, such as restaurant menus, and optional features for a welcome screen or power button availability. Also, learn how to create a multi-app kiosk, or fixed-purpose device, to provide an easy-to-understand experience giving users the things they need to use.

  • Configure a Windows 10 kiosk that runs multiple apps: Learn how to create kiosks that run more than one app and the benefits of a multi-app kiosk, or fixed-purpose device.

  • Kiosk apps for assigned access best practices: In Windows 10, you can use assigned access to create a kiosk device, which enables users to interact with just a single Universal Windows app. Learn about the best practices for implementing a kiosk app.

  • Guidelines for choosing an app for assigned access (kiosk mode): Assigned access restricts a local standard user account on the device so that it only has access to a single-function device, like a kiosk. Learn about the guidelines for choosing a Windows app, web browsers, and securing your information. Also, learn about additional configurations required for some apps before it can work properly in assigned access.

  • Other settings to lock down: Learn how to configure a more secure kiosk experience. In addition to the settings, learn how to set up automatic logon for your kiosk device. For example, when the kiosk device restarts, you can log back into the device manually or by setting up automatic logon.

  • Add apps to Microsoft Intune: Learn about and understand a few app fundamentals and requirements before adding them to Intune and making them available to your users.

  • AssignedAccess configuration service provider (CSP): The AssignedAccess configuration service provider (CSP) sets the device to run in kiosk mode. Once the CSP has executed, then the next user login associated with the kiosk mode puts the device into the kiosk mode running the application specified in the CSP configuration.


Provide feedback or get support

To provide feedback on Microsoft Edge kiosk mode in Feedback Hub, select Microsoft Edge as the Category, and All other issues as the subcategory.

For multi-app kiosk only. If you have set up the Feedback Hub in assigned access, you can you submit the feedback from the device running Microsoft Edge in kiosk mode in which you can include diagnostic logs. In the Feedback Hub, select Microsoft Edge as the Category, and All other issues as the subcategory.


Feature comparison of kiosk mode and kiosk browser app

In the following table, we show you the features available in both Microsoft Edge kiosk mode and Kiosk Browser app available in Microsoft Store. Both kiosk mode and kiosk browser app work in assigned access.

Feature Microsoft Edge kiosk mode Microsoft Kiosk browser app
Print support Supported Not supported
Multi-tab support Supported Not supported
Allow/Block URL support Supported

*For Microsoft Edge kiosk mode use Windows Defender Firewall. Microsoft kiosk browser has custom policy support.

Supported
Configure Home Button Supported Supported
Set Start page(s) URL Supported Supported

Same as Home button URL

Set New Tab page URL Supported Not supported
Favorites management Supported Not supported
End session button Supported Supported

In Microsoft Intune, you must create a custom URI to enable. Dedicated UI configuration targeted for 1808.

Reset on inactivity Supported Supported
Internet Explorer integration (Enterprise Mode site list) Supported

Multi-app mode only

Not supported
Available in Microsoft Store Not supported Supported
SKU availability Windows 10 October 2018 Update
Professional, Enterprise, and Education
Windows 10 April 2018 Update
Professional, Enterprise, and Education

*Windows Defender Firewall

To prevent access to unwanted websites on your kiosk device, use Windows Defender Firewall to configure a list of allowed websites, blocked websites or both. For more details, see Windows Defender Firewall with Advanced Security Deployment.