Configure assigned access by using Windows PowerShell (Industry 8.1)

Article
12/14/2016

7/8/2014

Learn how to configure assigned access on your Windows Embedded 8.1 Industry (Industry 8.1) device by using Windows Powershell.

By using a Windows PowerShell cmdlet, you can configure assigned access to limit an existing standard account to use only one installed Windows Store app that you choose. This can be useful to set up single-function devices, such as for a restaurant menu or a display at a trade show.

You can identify the user by one of the following:

User name of the local user account name to use for assigned access.
User security identifier (SID) for the user to use for assigned access. This user cannot be a domain account or an administrative account.

You can identify the Windows Store app by one of the following:

App name that is the friendly name of the installed Windows Store app to use for assigned access. Wildcard characters are accepted.
Application User Model ID (AppUserModelID) for the installed Windows Store app to use for assigned access. For information about how to find the AppUserModelID, see Find the Application User Model ID of an installed app.

Prerequisites

You are signed in to an administrator account.

You have Windows PowerShell, and Windows 8.1 or Windows Embedded 8.1 Industry (Industry 8.1) installed on your computer.

To configure assigned access by user name and AppUserModelID

At a Windows PowerShell prompt, type the following:

Set-AssignedAccess -AppUserModelId microsoft.windowsphotos_8wekyb3d8bbwe!app -UserName <username>

If a user is signed in or the PC has a PS/2 keyboard, restart the computer to apply the changes.

To configure assigned access by user name and app name

At a Windows PowerShell prompt, type the following, using the app name and user name:
```
Set-AssignedAccess -AppName CustomApp -UserName <username>
```
If a user is signed in or the PC has a PS/2 keyboard, restart the computer to apply the changes.

To configure assigned access by user SID and AppUserModelID

At a Windows PowerShell prompt, type the following, using the AppUserModelID and user SID:

Set-AssignedAccess -AppUserModelId microsoft.windowsphotos_8wekyb3d8bbwe!app -UserSID S-1-5-21-523423449-2432423479-234123443-1004

If a user is signed in or the PC has a PS/2 keyboard, restart the computer to apply the changes.

To configure assigned access by app name and user SID

At a Windows PowerShell prompt, type the following, using the desired app name and user SID:

Set-AssignedAccess -AppName CustomApp  -UserSID S-1-5-21-523423449-2432423479-234123443-1004

If a user is signed in or the PC has a PS/2 keyboard, restart the computer to apply the changes.

Next Steps

Use the Lockdown Baseline Tool (LBT) and Configuration Manager to capture the settings and deploy them to the desired devices. For more information, see Capture lockdown and branding features.