Windows 8 was the last Microsoft OS to deliver an embedded edition as a formal SKU. In Windows 10, the customization may be applied directly to a Windows 10 Enterprise (or Education) installation or image file. The customization available to modify the image is found in Windows features under the device lockdown area. Those who have crafted images for Windows Embedded in the past will recognize the options and be familiar with the capabilities already. Certainly, they are worth covering in this text for a clear understanding of what these capabilities are and aren't. These features are available only in Windows 10 Enterprise and Education editions, yet are visible on a Windows 10 Professional installation. They may or may not work properly though on Professional and likely violate license terms if they do; your mileage may vary:

Device Lockdown consists of:

Custom Logon: Defined as enables customized logon experiences, which is a bit vague
Keyboard Filter: Prevents unwanted keystrokes (enabling audit mode, avoiding auto logon, and so on)
Shell Launcher: For launching your own custom shell instead of the default Windows one
Unbranded Boot: Suppresses Windows elements that appear when Windows starts, resumes, or encounters errors
Unified Write Filter: Installs services and tools to protects physical media from write operations

Note that checking these boxes enables the feature for configuration; additional work is needed to implement the feature properly. An overview of each is found next.