Set-AssignedAccess
Configures a user to launch only one app.
Syntax
Set-AssignedAccess
-UserName <String>
-AppName <String>
[-WhatIf]
[-Confirm]
[<CommonParameters>] Set-AssignedAccess
-UserName <String>
-AppUserModelId <String>
[-WhatIf]
[-Confirm]
[<CommonParameters>] Set-AssignedAccess
-UserSID <String>
-AppUserModelId <String>
[-WhatIf]
[-Confirm]
[<CommonParameters>] Set-AssignedAccess
-UserSID <String>
-AppName <String>
[-WhatIf]
[-Confirm]
[<CommonParameters>] Description
The Set-AssignedAccess cmdlet configures the specified user account so that it can use only one Windows Store app. The user cannot exit the app, sign out, or access any system settings.
If a user is signed-in or the computer has a PS/2 keyboard, you must restart the computer to apply the changes.
To sign out of assigned access, quickly press the left Windows logo key five times.
Assigned Access cmdlets are supported on Windows 10 and Windows 11 client operating systems only.
Examples
Example 1: Set assigned access by SID and app name
PS C:\> Set-AssignedAccess -UserSID "S-1-5-21-523423449-2432423479-234123443-1004" -AppName "CustomApp"This command configures assigned access by using the user SID and the app name.
Example 2: Set assigned access by user name and AppUserModelID
PS C:\> Set-AssignedAccess -UserName "UserName" -AppUserModelId "microsoft.windowsphotos_8wekyb3d8bbwe!app"This command configures assigned access by using the user name and AppUserModelID.
Parameters
-AppName
Specifies the name of the installed Windows Store app to use for assigned access. Wildcard characters are accepted.
| Type: | String |
| Position: | Named |
| Default value: | None |
| Required: | True |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-AppUserModelId
Specifies the Application User Model ID (AppUserModelID) for the installed Windows Store app to use for assigned access. The AppUserModelID is found in the app's AUMIDs.txt file.
| Type: | String |
| Aliases: | AUMID |
| Position: | Named |
| Default value: | None |
| Required: | True |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-Confirm
Prompts you for confirmation before running the cmdlet.
| Type: | SwitchParameter |
| Aliases: | cf |
| Position: | Named |
| Default value: | False |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-UserName
Specifies the local user account name to use for assigned access. This cannot be a domain account or an administrator account.
| Type: | String |
| Position: | Named |
| Default value: | None |
| Required: | True |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-UserSID
Specifies the security identifier (SID) for the local user account to use for assigned access. This account cannot be a domain account or an administrator account.
| Type: | String |
| Position: | Named |
| Default value: | None |
| Required: | True |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-WhatIf
Shows what would happen if the cmdlet runs. The cmdlet is not run.
| Type: | SwitchParameter |
| Aliases: | wi |
| Position: | Named |
| Default value: | False |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
Inputs
None.
You cannot pipe input to this cmdlet.
Outputs
Notes
- To get all the Windows Store apps installed for a user account, use the Get-AppxPackage cmdlet as follows:
Get-AppxPackage -User "username"