The Single App Mode profile allows you to limit access on the device to a single application. With Single App Mode, the device is locked into a single application until the payload is removed. The policy enables after a device reboot.


Single App Mode has some restrictions and limitations.

  • Windows Universal or Modern apps only. Single App Mode does not support legacy .msi or .exe applications.
  • Users must be local standard users only. They cannot be a domain user, admin user, Microsoft account, or guest. The Standard User must be a Local User. Domain Accounts are not supported.


  1. Navigate to Devices > Profiles > List View > Add and select Add Profile.
  2. Select Windows and then select Windows Desktop
  3. Select User Profile.
  4. Configure the profile General settings.
  5. Select the Single App Mode Profile.
  6. Configure the Single App Mode settings:
    Settings Descriptions
    Application Name

    Enter the application friendly name.

    For Windows apps, the friendly name is the Package Name or Package ID.

    Run a PowerShell command to get the friendly name of the app installed on the device. The command "Get-AppxPackage" returns the application friendly name as "name."

  7. After configuring a Single App Mode profile, you must set up Single App Mode on the device.
    1. After receiving the Single App Mode profile on the device, reboot the device to begin.
    2. Once the device restarts, you are prompted to sign into the device with the Standard User account.
      Once signed in, the policy launches and Single App Mode is ready for use.
    If you must sign out of Single App Mode, press the Windows key 5X fast to launch the login screen to log in to a different user.