Assigned Access: Configurations (Desktop)

The Assigned Access: Configurations profile configuration restricts device users' access to a set of admin defined applications, specified by their administrator. Device users are prevented from accessing any other applications or device controls while Assigned Access is active. Applications can be either Modern Windows (.appx) or Classic (.exe) applications. You can apply Assigned Access to a local device account, a domain account, or a Microsoft account.

The Assigned Access: Configurations dialog box provides a list of applications to choose from in the Allowed Applications section of the Home Screen tab.

Once the profile has been assigned, devices must be rebooted before the Assigned Access profile configuration will take effect. You should also reboot the device when the profile configuration is revoked.

General

User Account Enter the user account where the Assigned Access profile application applies. Assigned access supports local device accounts, domain accounts, or Microsoft accounts.

If using a local account, enter just the username, no domain.

If using a domain account, include the domain with the username, i.e. domain\username

If using a Microsoft account, enter the complete email address, i.e. someone@outlook.com.

If using a Microsoft account with Azure domain join or Azure enrolled devices, enter AzureAD\ followed by the complete email address, i.e. AzureAD\someone@outlook.com. Do not change AzureAD\ to another domain.
Show Taskbar When enabled, the taskbar is visible on the device during assigned access mode.
Grid Options (Device Dependent) Select the grid layout of the allowed applications.

Home Screen

Allowed Applications

Use this section to select which applications the device user will have access to while the device is in assigned access mode.

You can select predefined applications or custom applications.

Type Select the type of application from the dropdown list:
  • Modern: .appx
  • Classic: .exe
Application For predefined applications, select an application from the dropdown list.
Note: You must choose an application type before you can select an application.
Name For custom applications, enter the application name.
User Model ID For custom applications, enter the user model ID for the application. For predefined applications, this field is automatically populated once you select an application.

Start Menu

Use this section to configure how the tiles appear in the Start menu. You can add tiles for both applications and web pages.

Note: You can add application tiles only for applications already configured in the Allowed Applications list.

To add a new menu item, click Add. To edit a menu item's settings, click on its name. To remove a menu item from the Start menu, hover over the menu item in the list and click Delete.