![Page 1: Build 2016 - P508 - Customizing Your Device Experience with Assigned Access](https://reader031.vdocument.in/reader031/viewer/2022022415/58ec13d61a28abe03c8b46a9/html5/thumbnails/1.jpg)
![Page 2: Build 2016 - P508 - Customizing Your Device Experience with Assigned Access](https://reader031.vdocument.in/reader031/viewer/2022022415/58ec13d61a28abe03c8b46a9/html5/thumbnails/2.jpg)
![Page 3: Build 2016 - P508 - Customizing Your Device Experience with Assigned Access](https://reader031.vdocument.in/reader031/viewer/2022022415/58ec13d61a28abe03c8b46a9/html5/thumbnails/3.jpg)
Windows 10Pro
Enterprise
Education
Restrict the device experience for a specific user account to a
single universal windows application.
Example:
• Kiosk type single-function devices
Windows 10Mobile
Mobile Enterprise
Restrict the device experience for one or more functional roles to
a curated set of applications and settings.
Examples:
• Kiosk type single-function devices
• Corporate owned lockdown devices for single user
• Corporate owned shared devices for multiple users with different roles
![Page 4: Build 2016 - P508 - Customizing Your Device Experience with Assigned Access](https://reader031.vdocument.in/reader031/viewer/2022022415/58ec13d61a28abe03c8b46a9/html5/thumbnails/4.jpg)
![Page 5: Build 2016 - P508 - Customizing Your Device Experience with Assigned Access](https://reader031.vdocument.in/reader031/viewer/2022022415/58ec13d61a28abe03c8b46a9/html5/thumbnails/5.jpg)
Assigned access lets you restrict a specific user account to using only one universal windows app.
![Page 6: Build 2016 - P508 - Customizing Your Device Experience with Assigned Access](https://reader031.vdocument.in/reader031/viewer/2022022415/58ec13d61a28abe03c8b46a9/html5/thumbnails/6.jpg)
Desktop
Kiosk app
(under lock view)
Lock screen app
Kiosk app
(above lock view)
z order
low
high
![Page 7: Build 2016 - P508 - Customizing Your Device Experience with Assigned Access](https://reader031.vdocument.in/reader031/viewer/2022022415/58ec13d61a28abe03c8b46a9/html5/thumbnails/7.jpg)
• Secure
• Use
• Provide
• Manage
• Add
• Test
• Do not
• Do not MSDN link
![Page 8: Build 2016 - P508 - Customizing Your Device Experience with Assigned Access](https://reader031.vdocument.in/reader031/viewer/2022022415/58ec13d61a28abe03c8b46a9/html5/thumbnails/8.jpg)
![Page 9: Build 2016 - P508 - Customizing Your Device Experience with Assigned Access](https://reader031.vdocument.in/reader031/viewer/2022022415/58ec13d61a28abe03c8b46a9/html5/thumbnails/9.jpg)
Intended for corporate owned task oriented devices
Role is a curated lockdown experience
Multiple roles can be defined by IT admin
Custom login and role switching experience
![Page 10: Build 2016 - P508 - Customizing Your Device Experience with Assigned Access](https://reader031.vdocument.in/reader031/viewer/2022022415/58ec13d61a28abe03c8b46a9/html5/thumbnails/10.jpg)
![Page 11: Build 2016 - P508 - Customizing Your Device Experience with Assigned Access](https://reader031.vdocument.in/reader031/viewer/2022022415/58ec13d61a28abe03c8b46a9/html5/thumbnails/11.jpg)
![Page 12: Build 2016 - P508 - Customizing Your Device Experience with Assigned Access](https://reader031.vdocument.in/reader031/viewer/2022022415/58ec13d61a28abe03c8b46a9/html5/thumbnails/12.jpg)
![Page 13: Build 2016 - P508 - Customizing Your Device Experience with Assigned Access](https://reader031.vdocument.in/reader031/viewer/2022022415/58ec13d61a28abe03c8b46a9/html5/thumbnails/13.jpg)
![Page 14: Build 2016 - P508 - Customizing Your Device Experience with Assigned Access](https://reader031.vdocument.in/reader031/viewer/2022022415/58ec13d61a28abe03c8b46a9/html5/thumbnails/14.jpg)
• Start simple
• Add comments
• Validate
• Allow device reset
• Test
![Page 15: Build 2016 - P508 - Customizing Your Device Experience with Assigned Access](https://reader031.vdocument.in/reader031/viewer/2022022415/58ec13d61a28abe03c8b46a9/html5/thumbnails/15.jpg)
Class Method Description
DeviceLockdownProfile ApplyLockdownProfileAsync Activates the restrictions
associated with the
specified user role ID.
GetCurrentLockdownProfile Gets the user role ID
that is currently in use
by the device.
GetLockdownProfileInformation Gets the information
object about a specific
user role.
GetSupportedLockdownProfiles Gets the list of
supported user role IDs.
Class Property Description
DeviceLockdownProfileInformation Name Gets the user descriptor string of
current profile
Windows.Embedded.DeviceLockdown APIs
![Page 16: Build 2016 - P508 - Customizing Your Device Experience with Assigned Access](https://reader031.vdocument.in/reader031/viewer/2022022415/58ec13d61a28abe03c8b46a9/html5/thumbnails/16.jpg)
protected override void OnNavigatedTo(NavigationEventArgs e)
{
try
{
// If the current role is Guid.Empty, then the user is not signed in.
Guid currentRole = DeviceLockdownProfile.GetCurrentLockdownProfile();
if (currentRole == Guid.Empty)
{
SignInStatus.Text = "You are not signed in.";
canSignOut = false;
}
else
{
DeviceLockdownProfileInformation currentProfile = DeviceLockdownProfile.GetLockdownProfileInformation(currentRole);
SignInStatus.Text = "You are signed in as " + currentProfile.Name;
canSignOut = true;
}
SignOutButton.IsEnabled = canSignOut;
LoadApplicationUsers();
}
catch (System.IO.FileNotFoundException)
{
rootPage.NotifyUser("Assigned Access is not configured on this device.", NotifyType.ErrorMessage);
}
}
![Page 17: Build 2016 - P508 - Customizing Your Device Experience with Assigned Access](https://reader031.vdocument.in/reader031/viewer/2022022415/58ec13d61a28abe03c8b46a9/html5/thumbnails/17.jpg)
private void LoadApplicationUsers()
{
// Add the available roles.
foreach (Guid roleId in DeviceLockdownProfile.GetSupportedLockdownProfiles())
{
DeviceLockdownProfileInformation profile = DeviceLockdownProfile.GetLockdownProfileInformation(roleId);
UserRoles.Items.Add(new ListBoxItem() { Content = profile.Name, Tag = roleId });
}
// If there are roles available, then pre-select the first one and enable the Sign In button.
if (UserRoles.Items.Count > 0)
{
UserRoles.SelectedIndex = 0;
SignInButton.IsEnabled = true;
}
}
![Page 18: Build 2016 - P508 - Customizing Your Device Experience with Assigned Access](https://reader031.vdocument.in/reader031/viewer/2022022415/58ec13d61a28abe03c8b46a9/html5/thumbnails/18.jpg)
private async Task SignInAsync()
{
// Extract the name and role of the item the user selected.
ListBoxItem selectedItem = (ListBoxItem)UserRoles.SelectedItem;
string selectedName = (string)selectedItem.Content;
Guid selectedRole = (Guid)selectedItem.Tag;
// Note that successfully applying the profile will result in the termination of all running apps, including this sample.
await DeviceLockdownProfile.ApplyLockdownProfileAsync(selectedRole);
}
![Page 19: Build 2016 - P508 - Customizing Your Device Experience with Assigned Access](https://reader031.vdocument.in/reader031/viewer/2022022415/58ec13d61a28abe03c8b46a9/html5/thumbnails/19.jpg)
private async Task SignOutAsync()
{
// Apply the Default role, which is represented by Guid.Empty.
// The Default role is the one that is used when nobody is signed in.
// Note that successfully applying the profile will result in the termination of all running apps, including this sample.
await DeviceLockdownProfile.ApplyLockdownProfileAsync(Guid.Empty);
}
![Page 20: Build 2016 - P508 - Customizing Your Device Experience with Assigned Access](https://reader031.vdocument.in/reader031/viewer/2022022415/58ec13d61a28abe03c8b46a9/html5/thumbnails/20.jpg)
<?xml version="1.0" encoding="utf-8"?>
<Package
xmlns="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
xmlns:mp="http://schemas.microsoft.com/appx/2014/phone/manifest"
xmlns:uap="http://schemas.microsoft.com/appx/manifest/uap/windows10"
xmlns:rescap="http://schemas.microsoft.com/appx/manifest/foundation/windows10/restrictedcapabilities"
IgnorableNamespaces="uap mp rescap">
.
.
.
<Dependencies>
<TargetDeviceFamily Name="Windows.Mobile" MinVersion="10.0.10240.0" MaxVersionTested="10.0.10586.0" />
</Dependencies>
.
.
.
<Capabilities>
<rescap:Capability Name="enterpriseDeviceLockdown" />
</Capabilities>
</Package>
![Page 21: Build 2016 - P508 - Customizing Your Device Experience with Assigned Access](https://reader031.vdocument.in/reader031/viewer/2022022415/58ec13d61a28abe03c8b46a9/html5/thumbnails/21.jpg)
![Page 22: Build 2016 - P508 - Customizing Your Device Experience with Assigned Access](https://reader031.vdocument.in/reader031/viewer/2022022415/58ec13d61a28abe03c8b46a9/html5/thumbnails/22.jpg)
Set up a kiosk on Windows 10 Pro, Enterprise, or Education
Kiosk apps for assigned access: Best practices
Configure Windows 10 Mobile using Lockdown XML
Set up a kiosk on Windows 10 Mobile or Windows 10 Mobile Enterprise
Windows.Embedded.DeviceLockdown namespace
Github - Device lockdown with Azure login sample
EnterpriseAssignedAccess CSP
Channel 9
Microsoft Virtual Academy
![Page 23: Build 2016 - P508 - Customizing Your Device Experience with Assigned Access](https://reader031.vdocument.in/reader031/viewer/2022022415/58ec13d61a28abe03c8b46a9/html5/thumbnails/23.jpg)