diff --git a/windows/configuration/kiosk/_lock-down-windows-10-to-specific-apps.md b/windows/configuration/kiosk/_lock-down-windows-10-to-specific-apps.md
index 7f28735fb6..3ec3303c35 100644
--- a/windows/configuration/kiosk/_lock-down-windows-10-to-specific-apps.md
+++ b/windows/configuration/kiosk/_lock-down-windows-10-to-specific-apps.md
@@ -58,6 +58,7 @@ If you don't want to use a provisioning package, you can deploy the configuratio
### Create XML file
+
#### Profile
@@ -106,19 +106,14 @@ There are two types of profiles that you can specify in the XML:
A lockdown profile section in the XML has the following entries:
- [**Id**](#id)
-
- [**AllowedApps**](#allowedapps)
-
- [**FileExplorerNamespaceRestrictions**](#fileexplorernamespacerestrictions)
-
- [**StartLayout**](#startlayout)
-
- [**Taskbar**](#taskbar)
A kiosk profile in the XML has the following entries:
- [**Id**](#id)
-
- [**KioskModeApp**](#kioskmodeapp)
##### Id
@@ -158,8 +153,6 @@ Here are the predefined assigned access AppLocker rules for **desktop apps**:
The following example allows Groove Music, Movies & TV, Photos, Weather, Calculator, Paint, and Notepad apps to run on the device, with Notepad configured to automatically launch and create a file called `123.text` when the user signs in.
-
-
```xml
diff --git a/windows/configuration/kiosk/_lock-down-windows-11-to-specific-apps.md b/windows/configuration/kiosk/_lock-down-windows-11-to-specific-apps.md
index 3b9039bc3d..0114d43a6c 100644
--- a/windows/configuration/kiosk/_lock-down-windows-11-to-specific-apps.md
+++ b/windows/configuration/kiosk/_lock-down-windows-11-to-specific-apps.md
@@ -20,6 +20,7 @@ An assigned access multi-app kiosk runs one or more apps from the desktop. Peopl
> [!TIP]
> Be sure to check the [configuration recommendations](kiosk-prepare.md) before you set up your kiosk.
+
+
#### Profile
There are two types of profiles that you can specify in the XML:
@@ -115,8 +118,6 @@ Here are the predefined assigned access AppLocker rules for **desktop apps**:
The following example allows Photos, Weather, Calculator, Paint, and Notepad apps to run on the device, with Notepad configured to automatically launch and create a file called `123.text` when the user signs in.
-
-
```xml
@@ -129,6 +130,8 @@ The following example allows Photos, Weather, Calculator, Paint, and Notepad app
```
+
##### KioskModeApp
**KioskModeApp** is used for a [kiosk profile](#profile) only. Enter the AUMID for a single app. You can only specify one kiosk profile in the XML.
diff --git a/windows/configuration/kiosk/create-xml.md b/windows/configuration/kiosk/create-xml.md
index 53ef88a0d8..f1df64e09c 100644
--- a/windows/configuration/kiosk/create-xml.md
+++ b/windows/configuration/kiosk/create-xml.md
@@ -120,7 +120,9 @@ Based on the purpose of the kiosk device, define the list of applications that a
- For UWP apps, you must provide the App User Model ID (AUMID)
- [Learn how to get the AUMID]()
-- For desktop apps, specify the AUMID or the full path of the executable, which can contain one or more system environment variables in the form of %variableName%
+- For desktop apps, specify the AUMID or the full path of the executable, which can contain one or more system environment variables in the form of %variableName%. For example, `%systemroot%` or `%windir%`.
+- If an app has a dependency on another app, both must be included in the allowed apps list. For example, Internet Explorer 64-bit has a dependency on Internet Explorer 32-bit, so you must allow both `"C:\Program Files\internet explorer\iexplore.exe"` and `"C:\Program Files (x86)\Internet Explorer\iexplore.exe"`
+- To configure a single app to launch automatically when the user signs in, include `rs5:AutoLaunch="true"` after the AUMID or path. You can also include arguments to be passed to the app
Here are the predefined assigned access AppLocker rules:
@@ -151,9 +153,12 @@ The following example allows Calculator, Photos, Weather, Calculator, Command Pr
+
```
+::: zone pivot="windows-10"
+
### StartLayout node
After the definition of allowed applications, customize the Start layout for the kiosk experience. You can choose to pin all the allowed applications on the Start menu, or a subset.
@@ -166,7 +171,6 @@ The easiest way to create a customized Start layout is to configure the Start me
The following example pins Calculator, Photos, Weather, Calculator, Command Prompt, and Windows PowerShell apps to the Start menu.
-::: zone pivot="windows-10"
```xml
@@ -201,6 +205,12 @@ The following example pins Calculator, Photos, Weather, Calculator, Command Prom
::: zone pivot="windows-11"
+### StartPins node
+
+After you define the list of allowed applications, you can customize the Start layout for your kiosk experience. The easiest way to create a customized Start layout to apply to other Windows client devices is to set up the Start screen on a test device and then export the layout. Once you've decided, you can get the JSON needed for your kiosk configuration by following the steps to [Get the pinnedList JSON](../start/customize-and-export-start-layout.md). If you opt to do this using the PowerShell command, make sure that the system you run the command on has the same file structure as the device on which you will apply the kiosk (the path to the allowed apps must be the same). At the end of this step, you should have a JSON pinnedList that looks something like the below.
+
+Add your pinnedList JSON into the StartPins tag in your XML file.
+
```xml
```
+> [!NOTE]
+> If an app isn't installed for the user, but is included in the Start layout XML, the app isn't shown on the Start screen.
+
::: zone-end
### Taskbar
@@ -234,7 +247,8 @@ The following example hides the taskbar:
-This is different from the Automatically hide the taskbar option in tablet mode, which shows the taskbar when swiping up from or moving the mouse pointer down to the bottom of the screen. Setting ShowTaskbar as false will always keep the taskbar hidden.
+> [!NOTE]
+> This is different from the **Automatically hide the taskbar** option in tablet mode, which shows the taskbar when swiping up from or moving the mouse pointer down to the bottom of the screen. Setting **ShowTaskbar** as **false** will always keep the taskbar hidden.
## Configs
@@ -305,15 +319,15 @@ This is different from the Automatically hide the taskbar option in tablet mode,
:::column span="1":::
**Scenario**
:::column-end:::
- :::column:::
+ :::column span="3":::
**Sample Xml**
:::column-end:::
:::row-end:::
:::row:::
- :::column:::
+ :::column span="1":::
**Block everything**
:::column-end:::
- :::column:::
+ :::column span="3":::
Either don't use the node or leave it empty
```xml
@@ -326,7 +340,7 @@ This is different from the Automatically hide the taskbar option in tablet mode,
:::column span="1":::
**Only allow downloads**
:::column-end:::
- :::column:::
+ :::column span="3":::
```xml
@@ -339,7 +353,7 @@ This is different from the Automatically hide the taskbar option in tablet mode,
:::column span="1":::
**Only allow removable drives**
:::column-end:::
- :::column:::
+ :::column span="3":::
```xml
@@ -352,7 +366,7 @@ This is different from the Automatically hide the taskbar option in tablet mode,
:::column span="1":::
**Allow both Downloads, and removable drives**
:::column-end:::
- :::column:::
+ :::column span="3":::
```xml
@@ -366,7 +380,7 @@ This is different from the Automatically hide the taskbar option in tablet mode,
:::column span="1":::
**No restrictions, all locations are allowed**
:::column-end:::
- :::column:::
+ :::column span="3":::
```xml
diff --git a/windows/configuration/kiosk/images/profile-config.png b/windows/configuration/kiosk/images/profile-config.png
deleted file mode 100644
index 24a4dad4ab..0000000000
Binary files a/windows/configuration/kiosk/images/profile-config.png and /dev/null differ