Group policy for kiosk



Bryan
07-10-2005, 12:46 AM
I have a workstation that will be used as a Kiosk. Customers will use this
system to browse a manufacturers web-site. I want to lock the UI down as
much as possible so that the customer can't do anything but browse on the
Internet. If I used the group policy editor to modify the local computer,
is there a way that I can quickly get full access back if I need to manage
the computer?

Or in other words, can I designate settings to local users, if I don't have
the computer connected to a windows server with Active Directory?

Thanks for any advice on this.
Bryan

Doug Knox MS-MVP
07-10-2005, 12:46 AM
See www.dougknox.com, Win XP Utilities, Windows XP Security Console. This utility will allow you apply a large number of Group Policy settings on a per-user basis in a non-domain environment.

Additionally, see:

http://support.microsoft.com/?id=293655
How to apply local policies to all users except administrators in a workgroup setting in Windows 2000

Applies to XP, as well.

Additionally while log on to the user account you want to restrict, Click Start, Run and enter REGEDIT Go to:

HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon

Right click in a blank area of the right pane and select New, String value and name the new value Shell. Double click the value you just created and enter:

"C\Program Files\Internet Explorer\iexplore.exe" -K

This will make Internet Explorer, in Kiosk mode the shell for that user. You would likely need to enable Remote Desktop in order to make changes, or you would have to reboot the machine so you could log on with a different account.
--
Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart Display\Security
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Per user Group Policy Restrictions for XP Home and XP Pro
http://www.dougknox.com/xp/utils/xp_securityconsole.htm
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.

"Bryan" <bryan10@yahoo.com> wrote in message news:uXqJv6jYFHA.2796@TK2MSFTNGP09.phx.gbl...
>I have a workstation that will be used as a Kiosk. Customers will use this
> system to browse a manufacturers web-site. I want to lock the UI down as
> much as possible so that the customer can't do anything but browse on the
> Internet. If I used the group policy editor to modify the local computer,
> is there a way that I can quickly get full access back if I need to manage
> the computer?
>
> Or in other words, can I designate settings to local users, if I don't have
> the computer connected to a windows server with Active Directory?
>
> Thanks for any advice on this.
> Bryan
>
>


Group policy for kiosk