diff --git a/windows/configuration/assigned-access/configuration-file.md b/windows/configuration/assigned-access/configuration-file.md index 203f619561..63faf3589b 100644 --- a/windows/configuration/assigned-access/configuration-file.md +++ b/windows/configuration/assigned-access/configuration-file.md @@ -3,7 +3,7 @@ title: Create an Assigned Access configuration file description: Learn how to create an XML file to configure Assigned Access. ms.topic: how-to zone_pivot_groups: windows-versions-11-10 -ms.date: 02/27/2025 +ms.date: 3/7/2025 appliesto: --- diff --git a/windows/configuration/assigned-access/configure-multi-app-kiosk.md b/windows/configuration/assigned-access/configure-multi-app-kiosk.md index 07960e2884..e20f76b60a 100644 --- a/windows/configuration/assigned-access/configure-multi-app-kiosk.md +++ b/windows/configuration/assigned-access/configure-multi-app-kiosk.md @@ -1,7 +1,7 @@ --- title: Configure a Multi-App Kiosk With Assigned Access description: Learn how to configure a multi-app kiosk with Assigned Access. -ms.date: 02/27/2025 +ms.date: 3/7/2025 ms.topic: overview --- diff --git a/windows/configuration/assigned-access/configure-single-app-kiosk.md b/windows/configuration/assigned-access/configure-single-app-kiosk.md index 41d6cc3acc..e45c0e6815 100644 --- a/windows/configuration/assigned-access/configure-single-app-kiosk.md +++ b/windows/configuration/assigned-access/configure-single-app-kiosk.md @@ -1,7 +1,7 @@ --- title: Configure a Single-App Kiosk With Assigned Access description: Learn how to configure a single-app kiosk with Assigned Access. -ms.date: 02/27/2025 +ms.date: 3/7/2025 ms.topic: overview --- diff --git a/windows/configuration/assigned-access/examples.md b/windows/configuration/assigned-access/examples.md index ddb91506ec..7b189bdb01 100644 --- a/windows/configuration/assigned-access/examples.md +++ b/windows/configuration/assigned-access/examples.md @@ -1,7 +1,7 @@ --- title: Assigned Access Examples description: Practical examples of XML files to configure Assigned Access. -ms.date: 02/27/2025 +ms.date: 3/7/2025 ms.topic: reference zone_pivot_groups: windows-versions-11-10 appliesto: diff --git a/windows/configuration/assigned-access/includes/example-global-profile.md b/windows/configuration/assigned-access/includes/example-global-profile.md index a818640cbd..bb00d4a162 100644 --- a/windows/configuration/assigned-access/includes/example-global-profile.md +++ b/windows/configuration/assigned-access/includes/example-global-profile.md @@ -1,7 +1,7 @@ --- author: paolomatarazzo ms.author: paoloma -ms.date: 02/05/2024 +ms.date: 3/7/2025 ms.topic: include --- diff --git a/windows/configuration/assigned-access/includes/example-kiosk-uwp.md b/windows/configuration/assigned-access/includes/example-kiosk-uwp.md index 69e5a1ac70..e6202a80fb 100644 --- a/windows/configuration/assigned-access/includes/example-kiosk-uwp.md +++ b/windows/configuration/assigned-access/includes/example-kiosk-uwp.md @@ -1,7 +1,7 @@ --- author: paolomatarazzo ms.author: paoloma -ms.date: 02/05/2024 +ms.date: 3/7/2025 ms.topic: include --- diff --git a/windows/configuration/assigned-access/includes/example-restricted-experience.md b/windows/configuration/assigned-access/includes/example-restricted-experience.md index e8653f5e2f..1bcf0fe640 100644 --- a/windows/configuration/assigned-access/includes/example-restricted-experience.md +++ b/windows/configuration/assigned-access/includes/example-restricted-experience.md @@ -1,7 +1,7 @@ --- author: paolomatarazzo ms.author: paoloma -ms.date: 02/05/2024 +ms.date: 3/7/2025 ms.topic: include --- diff --git a/windows/configuration/assigned-access/includes/example-two-profiles.md b/windows/configuration/assigned-access/includes/example-two-profiles.md index 42bad92801..6c641d1609 100644 --- a/windows/configuration/assigned-access/includes/example-two-profiles.md +++ b/windows/configuration/assigned-access/includes/example-two-profiles.md @@ -1,7 +1,7 @@ --- author: paolomatarazzo ms.author: paoloma -ms.date: 02/05/2024 +ms.date: 3/7/2025 ms.topic: include --- diff --git a/windows/configuration/assigned-access/includes/example-usergroup.md b/windows/configuration/assigned-access/includes/example-usergroup.md index 7d69b07f0b..e2b6036391 100644 --- a/windows/configuration/assigned-access/includes/example-usergroup.md +++ b/windows/configuration/assigned-access/includes/example-usergroup.md @@ -1,7 +1,7 @@ --- author: paolomatarazzo ms.author: paoloma -ms.date: 02/05/2024 +ms.date: 3/7/2025 ms.topic: include --- diff --git a/windows/configuration/assigned-access/includes/quickstart-kiosk-intune.md b/windows/configuration/assigned-access/includes/quickstart-kiosk-intune.md index 8fb14f8ac6..135168d757 100644 --- a/windows/configuration/assigned-access/includes/quickstart-kiosk-intune.md +++ b/windows/configuration/assigned-access/includes/quickstart-kiosk-intune.md @@ -1,7 +1,7 @@ --- author: paolomatarazzo ms.author: paoloma -ms.date: 02/05/2024 +ms.date: 3/7/2025 ms.topic: include --- diff --git a/windows/configuration/assigned-access/includes/quickstart-kiosk-ps.md b/windows/configuration/assigned-access/includes/quickstart-kiosk-ps.md index 4f5ce43c2e..be008cf787 100644 --- a/windows/configuration/assigned-access/includes/quickstart-kiosk-ps.md +++ b/windows/configuration/assigned-access/includes/quickstart-kiosk-ps.md @@ -1,7 +1,7 @@ --- author: paolomatarazzo ms.author: paoloma -ms.date: 02/05/2024 +ms.date: 3/7/2025 ms.topic: include --- diff --git a/windows/configuration/assigned-access/includes/quickstart-kiosk-xml.md b/windows/configuration/assigned-access/includes/quickstart-kiosk-xml.md index 93a0607346..58b9223a5a 100644 --- a/windows/configuration/assigned-access/includes/quickstart-kiosk-xml.md +++ b/windows/configuration/assigned-access/includes/quickstart-kiosk-xml.md @@ -1,7 +1,7 @@ --- author: paolomatarazzo ms.author: paoloma -ms.date: 02/05/2024 +ms.date: 3/7/2025 ms.topic: include --- diff --git a/windows/configuration/assigned-access/includes/quickstart-restricted-experience-intune.md b/windows/configuration/assigned-access/includes/quickstart-restricted-experience-intune.md index 4238a97dad..cf233f5d67 100644 --- a/windows/configuration/assigned-access/includes/quickstart-restricted-experience-intune.md +++ b/windows/configuration/assigned-access/includes/quickstart-restricted-experience-intune.md @@ -1,7 +1,7 @@ --- author: paolomatarazzo ms.author: paoloma -ms.date: 02/05/2024 +ms.date: 3/7/2025 ms.topic: include --- diff --git a/windows/configuration/assigned-access/includes/quickstart-restricted-experience-ps.md b/windows/configuration/assigned-access/includes/quickstart-restricted-experience-ps.md index 94bb914c0b..0420fed316 100644 --- a/windows/configuration/assigned-access/includes/quickstart-restricted-experience-ps.md +++ b/windows/configuration/assigned-access/includes/quickstart-restricted-experience-ps.md @@ -1,7 +1,7 @@ --- author: paolomatarazzo ms.author: paoloma -ms.date: 02/05/2024 +ms.date: 3/7/2025 ms.topic: include --- diff --git a/windows/configuration/assigned-access/includes/quickstart-restricted-experience-xml.md b/windows/configuration/assigned-access/includes/quickstart-restricted-experience-xml.md index 52730d3c75..ad3cdd99d5 100644 --- a/windows/configuration/assigned-access/includes/quickstart-restricted-experience-xml.md +++ b/windows/configuration/assigned-access/includes/quickstart-restricted-experience-xml.md @@ -1,7 +1,7 @@ --- author: paolomatarazzo ms.author: paoloma -ms.date: 02/05/2024 +ms.date: 3/7/2025 ms.topic: include --- diff --git a/windows/configuration/assigned-access/includes/user-experience.md b/windows/configuration/assigned-access/includes/user-experience.md index 6476d42fe9..bb2dae2e79 100644 --- a/windows/configuration/assigned-access/includes/user-experience.md +++ b/windows/configuration/assigned-access/includes/user-experience.md @@ -1,7 +1,7 @@ --- author: paolomatarazzo ms.author: paoloma -ms.date: 02/05/2024 +ms.date: 3/7/2025 ms.topic: include --- diff --git a/windows/configuration/assigned-access/index.md b/windows/configuration/assigned-access/index.md index f61ce30d5a..58bc4e77a3 100644 --- a/windows/configuration/assigned-access/index.md +++ b/windows/configuration/assigned-access/index.md @@ -1,7 +1,7 @@ --- title: Assigned Access Overview description: Learn how to configure a Windows kiosk for single-app and multi-app scenarios with Assigned Access. -ms.date: 02/27/2025 +ms.date: 3/7/2025 ms.topic: overview --- diff --git a/windows/configuration/assigned-access/quickstart-kiosk.md b/windows/configuration/assigned-access/quickstart-kiosk.md index e8cce0c09a..e97890de44 100644 --- a/windows/configuration/assigned-access/quickstart-kiosk.md +++ b/windows/configuration/assigned-access/quickstart-kiosk.md @@ -2,7 +2,7 @@ title: "Quickstart: Configure a Single-App Kiosk With Assigned Access" description: Learn how to configure a single-app kiosk with Assigned Access using the Assigned Access configuration service provider (CSP), Microsoft Intune, PowerShell, or group policy (GPO). ms.topic: quickstart -ms.date: 02/27/2025 +ms.date: 3/7/2025 --- # Quickstart: configure a single-app kiosk with Assigned Access diff --git a/windows/configuration/assigned-access/quickstart-restricted-user-experience.md b/windows/configuration/assigned-access/quickstart-restricted-user-experience.md index 817d6f23ca..25e9c69ec6 100644 --- a/windows/configuration/assigned-access/quickstart-restricted-user-experience.md +++ b/windows/configuration/assigned-access/quickstart-restricted-user-experience.md @@ -2,7 +2,7 @@ title: "Quickstart: Configure a Restricted User Experience With Assigned Access" description: Learn how to configure a restricted user experience with Assigned Access using the Assigned Access configuration service provider (CSP), Microsoft Intune, PowerShell, or group policy (GPO). ms.topic: quickstart -ms.date: 02/27/2025 +ms.date: 3/7/2025 appliesto: zone_pivot_groups: windows-versions-11-10 --- diff --git a/windows/configuration/assigned-access/recommendations.md b/windows/configuration/assigned-access/recommendations.md index 6d709e9361..c98af9f486 100644 --- a/windows/configuration/assigned-access/recommendations.md +++ b/windows/configuration/assigned-access/recommendations.md @@ -2,7 +2,7 @@ title: Assigned Access Recommendations description: Learn about the recommended kiosk and restricted user experience configuration options. ms.topic: best-practice -ms.date: 02/27/2025 +ms.date: 3/7/2025 --- # Assigned Access recommendations diff --git a/windows/configuration/assigned-access/xsd.md b/windows/configuration/assigned-access/xsd.md index f327cbdf7f..4e9f941938 100644 --- a/windows/configuration/assigned-access/xsd.md +++ b/windows/configuration/assigned-access/xsd.md @@ -2,7 +2,7 @@ title: Assigned Access XML Schema Definition (XSD) description: Assigned Access XSD reference article. ms.topic: reference -ms.date: 02/27/2025 +ms.date: 3/7/2025 --- # Assigned Access XML Schema Definition (XSD) diff --git a/windows/configuration/kiosk/index.md b/windows/configuration/kiosk/index.md index 3c40e69882..5129be1a53 100644 --- a/windows/configuration/kiosk/index.md +++ b/windows/configuration/kiosk/index.md @@ -2,7 +2,7 @@ title: Windows Single-App and Multi-App Kiosk Configuration Options Overview description: Learn how to configure Windows kiosks with single-app and multi-app options for a secure and enhanced user experience. ms.topic: overview -ms.date: 02/27/2025 +ms.date: 3/7/2025 --- # Windows kiosks configuration options overview diff --git a/windows/configuration/shell-launcher/configuration-file.md b/windows/configuration/shell-launcher/configuration-file.md index 9dc38d93ef..3216b451eb 100644 --- a/windows/configuration/shell-launcher/configuration-file.md +++ b/windows/configuration/shell-launcher/configuration-file.md @@ -1,7 +1,7 @@ --- title: Create a Shell Launcher configuration file description: Learn how to create an XML file to configure a device with Shell Launcher. -ms.date: 02/27/2025 +ms.date: 3/7/2025 ms.topic: how-to --- diff --git a/windows/configuration/shell-launcher/configure-wmi.md b/windows/configuration/shell-launcher/configure-wmi.md index b677533757..b2d734e9ba 100644 --- a/windows/configuration/shell-launcher/configure-wmi.md +++ b/windows/configuration/shell-launcher/configure-wmi.md @@ -1,7 +1,7 @@ --- title: Configure Shell Launcher with the WMI provider description: Learn how to configure a Windows kiosk using the WMI provider for Shell Launcher. -ms.date: 02/27/2025 +ms.date: 3/7/2025 ms.topic: reference --- diff --git a/windows/configuration/shell-launcher/configure.md b/windows/configuration/shell-launcher/configure.md index 27a9450412..95dbe8ea02 100644 --- a/windows/configuration/shell-launcher/configure.md +++ b/windows/configuration/shell-launcher/configure.md @@ -1,7 +1,7 @@ --- title: Configure Shell Launcher description: Learn how to configure Shell Launcher. -ms.date: 02/27/2025 +ms.date: 3/7/2025 ms.topic: how-to --- @@ -84,16 +84,17 @@ For more information, see [WESL_UserSetting](wesl-usersetting.md). ## Launch different shells for different user accounts -By default, Shell Launcher runs the default shell, which is specified when you create the OS image at design time. The default shell is set to Cmd.exe, but you can specify any executable file to be the default shell. +By default, Shell Launcher runs the default shell, which is specified when you create the OS image at design time. The default shell is set to the Windows Command Processor (`Cmd.exe`), but you can specify any executable file to be the default shell. -You can configure Shell Launcher to launch a different shell for specific users or groups if you don't want to run the default shell. For example, you might configure a device to run a custom application shell for guest accounts, but run the standard Windows Explorer shell for administrator accounts in order to service the device. - -If you use the WMI providers to configure Shell Launcher for a user or group at run time, you must use the security identifier (SID) for that user or group; you can't use the user name or group name. - -For more information about common security identifiers, see [Well-known SIDs](/windows/win32/secauthz/well-known-sids). +You can also configure Shell Launcher to launch a different shell for specific users or groups if you don't want to run the default shell. For example, you might configure a device to launch a custom application shell for guest accounts, but run the standard Windows Explorer shell for administrator accounts for servicing the device. When the current signed in account belongs to two or more groups that have different configurations defined for each group, Shell Launcher uses the first configuration it finds. The search order isn't defined, so we recommend that you avoid assigning a user to multiple groups with different Shell Launcher configurations. +> [!NOTE] +> If you use the WMI provider to configure Shell Launcher for a user or group at run time, you must use the security identifier (SID) for that security principal. You can't use the user name or group name. +> +> For more information about common security identifiers, see [Well-known SIDs](/windows/win32/secauthz/well-known-sids). + ## Shell Launcher startup and exit behavior Shell Launcher processes the `Run` and `RunOnce` registry keys before starting the custom shell, so your custom shell doesn't need to handle the automatic startup of other applications and services. diff --git a/windows/configuration/shell-launcher/includes/quickstart-intune.md b/windows/configuration/shell-launcher/includes/quickstart-intune.md index 67b1c7788a..e2aef9a69d 100644 --- a/windows/configuration/shell-launcher/includes/quickstart-intune.md +++ b/windows/configuration/shell-launcher/includes/quickstart-intune.md @@ -1,7 +1,7 @@ --- author: paolomatarazzo ms.author: paoloma -ms.date: 10/31/2024 +ms.date: 3/7/2025 ms.topic: include --- diff --git a/windows/configuration/shell-launcher/includes/quickstart-ps.md b/windows/configuration/shell-launcher/includes/quickstart-ps.md index d6c03611c6..f8cccb47f1 100644 --- a/windows/configuration/shell-launcher/includes/quickstart-ps.md +++ b/windows/configuration/shell-launcher/includes/quickstart-ps.md @@ -1,7 +1,7 @@ --- author: paolomatarazzo ms.author: paoloma -ms.date: 10/31/2024 +ms.date: 3/7/2025 ms.topic: include --- diff --git a/windows/configuration/shell-launcher/includes/quickstart-xml.md b/windows/configuration/shell-launcher/includes/quickstart-xml.md index 085c937378..95ba5d01a1 100644 --- a/windows/configuration/shell-launcher/includes/quickstart-xml.md +++ b/windows/configuration/shell-launcher/includes/quickstart-xml.md @@ -1,7 +1,7 @@ --- author: paolomatarazzo ms.author: paoloma -ms.date: 10/31/2024 +ms.date: 3/7/2025 ms.topic: include --- diff --git a/windows/configuration/shell-launcher/index.md b/windows/configuration/shell-launcher/index.md index 613497602f..b10c77dc23 100644 --- a/windows/configuration/shell-launcher/index.md +++ b/windows/configuration/shell-launcher/index.md @@ -1,7 +1,7 @@ --- title: Shell Launcher Overview description: Learn how to configure devices with Shell Launcher. -ms.date: 02/27/2025 +ms.date: 3/7/2025 ms.topic: overview --- diff --git a/windows/configuration/shell-launcher/quickstart-kiosk.md b/windows/configuration/shell-launcher/quickstart-kiosk.md index 47a41e9daa..c7e587aafe 100644 --- a/windows/configuration/shell-launcher/quickstart-kiosk.md +++ b/windows/configuration/shell-launcher/quickstart-kiosk.md @@ -2,7 +2,7 @@ title: "Quickstart: configure a single-app kiosk with Shell Launcher" description: Learn how to configure a signle-app kiosk experience with Shell Launcher, using the Assigned Access configuration service provider (CSP), Microsoft Intune, PowerShell, or group policy (GPO). ms.topic: quickstart -ms.date: 02/27/2025 +ms.date: 3/7/2025 --- # Quickstart: configure a kiosk with Shell Launcher diff --git a/windows/configuration/shell-launcher/wesl-usersetting.md b/windows/configuration/shell-launcher/wesl-usersetting.md index ce3019dbf0..1cf9588b35 100644 --- a/windows/configuration/shell-launcher/wesl-usersetting.md +++ b/windows/configuration/shell-launcher/wesl-usersetting.md @@ -1,7 +1,7 @@ --- title: WESL_UserSetting description: WESL_UserSetting -ms.date: 02/25/2025 +ms.date: 3/7/2025 ms.topic: reference --- diff --git a/windows/configuration/shell-launcher/wesl-usersettinggetcustomshell.md b/windows/configuration/shell-launcher/wesl-usersettinggetcustomshell.md index 6be4813c8c..47ebc38538 100644 --- a/windows/configuration/shell-launcher/wesl-usersettinggetcustomshell.md +++ b/windows/configuration/shell-launcher/wesl-usersettinggetcustomshell.md @@ -1,7 +1,7 @@ --- title: WESL_UserSetting.GetCustomShell description: WESL_UserSetting.GetCustomShell -ms.date: 02/25/2025 +ms.date: 3/7/2025 ms.topic: reference --- diff --git a/windows/configuration/shell-launcher/wesl-usersettinggetdefaultshell.md b/windows/configuration/shell-launcher/wesl-usersettinggetdefaultshell.md index c32948ad15..227cacc8ea 100644 --- a/windows/configuration/shell-launcher/wesl-usersettinggetdefaultshell.md +++ b/windows/configuration/shell-launcher/wesl-usersettinggetdefaultshell.md @@ -1,7 +1,7 @@ --- title: WESL_UserSetting.GetDefaultShell description: WESL_UserSetting.GetDefaultShell -ms.date: 02/25/2025 +ms.date: 3/7/2025 ms.topic: reference --- diff --git a/windows/configuration/shell-launcher/wesl-usersettingisenabled.md b/windows/configuration/shell-launcher/wesl-usersettingisenabled.md index 1125bb1d92..bf29bbec60 100644 --- a/windows/configuration/shell-launcher/wesl-usersettingisenabled.md +++ b/windows/configuration/shell-launcher/wesl-usersettingisenabled.md @@ -1,7 +1,7 @@ --- title: WESL_UserSetting.IsEnabled description: WESL_UserSetting.IsEnabled -ms.date: 02/25/2025 +ms.date: 3/7/2025 ms.topic: reference --- diff --git a/windows/configuration/shell-launcher/wesl-usersettingremovecustomshell.md b/windows/configuration/shell-launcher/wesl-usersettingremovecustomshell.md index e5058577a9..02049c67eb 100644 --- a/windows/configuration/shell-launcher/wesl-usersettingremovecustomshell.md +++ b/windows/configuration/shell-launcher/wesl-usersettingremovecustomshell.md @@ -1,7 +1,7 @@ --- title: WESL_UserSetting.RemoveCustomShell description: WESL_UserSetting.RemoveCustomShell -ms.date: 02/25/2025 +ms.date: 3/7/2025 ms.topic: reference --- diff --git a/windows/configuration/shell-launcher/wesl-usersettingsetcustomshell.md b/windows/configuration/shell-launcher/wesl-usersettingsetcustomshell.md index 5b788c9295..11d0f79f2d 100644 --- a/windows/configuration/shell-launcher/wesl-usersettingsetcustomshell.md +++ b/windows/configuration/shell-launcher/wesl-usersettingsetcustomshell.md @@ -1,7 +1,7 @@ --- title: WESL_UserSetting.SetCustomShell description: WESL_UserSetting.SetCustomShell -ms.date: 02/25/2025 +ms.date: 3/7/2025 ms.topic: reference --- diff --git a/windows/configuration/shell-launcher/wesl-usersettingsetdefaultshell.md b/windows/configuration/shell-launcher/wesl-usersettingsetdefaultshell.md index d829d7d717..05602f2b64 100644 --- a/windows/configuration/shell-launcher/wesl-usersettingsetdefaultshell.md +++ b/windows/configuration/shell-launcher/wesl-usersettingsetdefaultshell.md @@ -1,7 +1,7 @@ --- title: WESL_UserSetting.SetDefaultShell description: WESL_UserSetting.SetDefaultShell -ms.date: 02/25/2025 +ms.date: 3/7/2025 ms.topic: reference --- diff --git a/windows/configuration/shell-launcher/wesl-usersettingsetenabled.md b/windows/configuration/shell-launcher/wesl-usersettingsetenabled.md index 64d952bf88..e6b09ba0e7 100644 --- a/windows/configuration/shell-launcher/wesl-usersettingsetenabled.md +++ b/windows/configuration/shell-launcher/wesl-usersettingsetenabled.md @@ -1,7 +1,7 @@ --- title: WESL_UserSetting.SetEnabled description: WESL_UserSetting.SetEnabled -ms.date: 02/25/2025 +ms.date: 3/7/2025 ms.topic: reference --- diff --git a/windows/configuration/shell-launcher/xsd.md b/windows/configuration/shell-launcher/xsd.md index 426fe7ef3e..0ad8f7aa2d 100644 --- a/windows/configuration/shell-launcher/xsd.md +++ b/windows/configuration/shell-launcher/xsd.md @@ -2,7 +2,7 @@ title: Shell Launcher XML Schema Definition (XSD) description: Shell Launcher XSD reference article. ms.topic: reference -ms.date: 02/27/2025 +ms.date: 3/7/2025 --- # Shell Launcher XML Schema Definition (XSD)