0

We’re using Shell Launcher to replace the default shell with our custom application. The custom shell launches correctly, and everything works as expected.

However, our application includes a “Run Windows” option that should allow users to temporarily switch back to the full Windows desktop environment (with taskbar, start menu, and desktop icons). This no longer works, launching explorer.exe only opens a file explorer window, not the full desktop shell.

Is there a recommended or supported way to launch/enable full Windows desktop access from within a custom shell on Windows 11 IoT Enterprise?

1
  • There is an explorer option to use separate processes which may have an impact if enabled/disabled for starting explorer as shell. Commented Oct 6 at 20:34

1 Answer 1

0

Answer from Microsoft (support email):

1- Shell Launcher v2 and Assigned Access APIs modify machine-level settings under HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\ShellLauncher.

2- These changes affect all users, so Windows restricts them to SYSTEM or an elevated process with the right privileges.

3- Simply running as an Administrator often isn’t enough because the Assigned Access service enforces the policy.

Options and might work: Split Privilege Model

  • Keep your main app running under the user account.

  • Create a small helper service running as SYSTEM (or LocalSystem) that listens for requests from your app (via IPC or named pipe).

  • When the user selects “Run Windows,” the helper performs:

    • Shell reassignment to explorer.exe using Shell Launcher APIs or PowerShell.

    • Initiates logoff.

  • This is the most common pattern for kiosk scenarios.

Use Task Scheduler with Highest Privileges

  • Your app can trigger a scheduled task configured to run as SYSTEM.

  • The task executes the shell switch and logoff.

This avoids keeping a persistent SYSTEM service but still uses SYSTEM for the sensitive operation.

Sign up to request clarification or add additional context in comments.

Comments

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Start asking to get answers

Find the answer to your question by asking.

Ask question

Explore related questions

See similar questions with these tags.