Assigned Access, also known as kiosk mode

I've mentioned kiosk functionality a few times; as it turns out, Windows 10 comes with a feature that will turn your Enterprise build into a kiosk serving a single application. So to do this manually, go to Settings | Accounts | Other people | Set up assigned access.

From here, it is as simple as assigning an account and an application that the account runs (essentially as its shell):

Once this is assigned an account and an application, when the account logs in, it opens that application. If the application closes, the user logs out.

For enterprise management, however, doing this configuration individually just won't scale. So there are guides on Technet on how to use PowerShell to configure this as well as MDM policies or even the Windows ICD.