Category filter

Script to enable the Downloads folder in kiosk

In multi-app kiosk mode, the device is restricted to a list of approved applications. It also restricts access to files and folders like all other functionalities. Though the kiosk mode induces limitations on device usage, you can add exemptions to the functionalities restricted. For instance, to make the company relevant data downloaded from the web accessible to the user (even when the device is in a kiosk), you can grant access to the downloaded files.

From Windows 10 version 1809 onwards, it is possible to grant explicit access to the Downloads folder on a device locked in multi-app kiosk mode. The doc explains how administrators can execute a script on Windows devices after configuring the multi-app kiosk lockdown policy to grant access to the Downloads folder.


The sample scripts provided below are adapted from a third-party open-source sites.

To grant user access to the Downloads folder in File Explorer, the admin can perform the following steps either while creating the multi-app kiosk policy or editing the already associated multi-app kiosk policy:

  1. While setting up the multi-app kiosk policy, add File Explorer as a desktop app:
    1. Enter the Kiosk account name.
    2. Click on the + button and select Desktop Apps. Provide the app name as File Explorer and its location C:\Windows\explorer.exe.
    3. Click on the Add button.
    4. Add File Explorer and its location to the policy

    5. Customize the start layout with the File Explorer application, and then export the updated start layout.
    6. Import the Start layout .xml file to this policy.
    7. Import the customized XML file to the policy

  2. Associate devices/groups and save the policy.
  3. After successfully applying the policy, execute the below PowerShell script to those devices/groups using the Execute Custom Script action.

Once the script is executed successfully, users will have access to the Downloads folder both through File Explorer and via a web browser.

The script enables access to Downloads folder on Windows multi-app kiosk


  • It is recommended to manually validate the script execution on a system before executing the action in bulk.
  • Hexnode will not be responsible for any damage/loss to the system on the behavior of the script.

  • Sample Script Repository