Restrict user to use only Internet Explorer



Mark Daly
07-10-2005, 12:48 AM
I have a client that want to setup a computer in a public location but
restrict it to running only Internet Explorer to access there website and
related links.
We would like Internet Explorer to run at startup in fullscreen mode, Remove
any toolbars, standard buttons...etc. and logoff the user if Internet
Explorer is closed or disable closing Internet Explorer.
We would like to disable any access to the Start Button, Task Manager,
system...etc.

Thanks In Advance,
Mark S. Daly
Daly Computers Network Solutions, LLC.
Dalycomputers@hotmail.com

Doug Knox MS-MVP
07-10-2005, 12:48 AM
See www.dougknox.com, Win XP Tips, Advanced Registry Editing. Then use this tip to load the Registry portion for the User profile you wish to restrict.

Then modify the Shell value (you'll probaby have to add the Shell value. Its a String value) in the following key in the "loaded" hive:

Software\Microsoft\Windows NT\CurrentVersion\Winlogon

Edit the value to read: "C:\Program Files\Internet Explorer\iexplore.exe" -k

Include the quotes as shown. This will force Internet Explorer in Kiosk mode to be the shell.

--
Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart Display\Security
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Per user Group Policy Restrictions for XP Home and XP Pro
http://www.dougknox.com/xp/utils/xp_securityconsole.htm
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.

"Mark Daly" <dalycomputers@hotmail.com> wrote in message news:%237MeSk6YFHA.3184@TK2MSFTNGP15.phx.gbl...
>I have a client that want to setup a computer in a public location but
> restrict it to running only Internet Explorer to access there website and
> related links.
> We would like Internet Explorer to run at startup in fullscreen mode, Remove
> any toolbars, standard buttons...etc. and logoff the user if Internet
> Explorer is closed or disable closing Internet Explorer.
> We would like to disable any access to the Start Button, Task Manager,
> system...etc.
>
> Thanks In Advance,
> Mark S. Daly
> Daly Computers Network Solutions, LLC.
> Dalycomputers@hotmail.com
>
>

Mark Daly
07-10-2005, 12:48 AM
Doug:
Thanks for your reply. Your site has helped me many time in the past.
Running Internet Explorer in Kiosk mode as the shell work great but the user
still has access to the Task Manager and is able to run explorer.exe which
gives them access to the Start Menu.
Is there an easy way to deny access to the Task Manager. I also need to deny
access to some of the Internet Explorer shortcuts and restrict what sites
are accessable.

Thanks Again!
Mark S. Daly
Daly Computers Network Solutions, LLC.
Dalycomputers@hotmail.com

"Doug Knox MS-MVP" <dknox@mvps.org> wrote in message
news:%23I3Fmt6YFHA.2572@TK2MSFTNGP14.phx.gbl...
See www.dougknox.com, Win XP Tips, Advanced Registry Editing. Then use this
tip to load the Registry portion for the User profile you wish to restrict.

Then modify the Shell value (you'll probaby have to add the Shell value. Its
a String value) in the following key in the "loaded" hive:

Software\Microsoft\Windows NT\CurrentVersion\Winlogon

Edit the value to read: "C:\Program Files\Internet
Explorer\iexplore.exe" -k

Include the quotes as shown. This will force Internet Explorer in Kiosk
mode to be the shell.

--
Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart
Display\Security
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Per user Group Policy Restrictions for XP Home and XP Pro
http://www.dougknox.com/xp/utils/xp_securityconsole.htm
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.

"Mark Daly" <dalycomputers@hotmail.com> wrote in message
news:%237MeSk6YFHA.3184@TK2MSFTNGP15.phx.gbl...
>I have a client that want to setup a computer in a public location but
> restrict it to running only Internet Explorer to access there website and
> related links.
> We would like Internet Explorer to run at startup in fullscreen mode,
> Remove
> any toolbars, standard buttons...etc. and logoff the user if Internet
> Explorer is closed or disable closing Internet Explorer.
> We would like to disable any access to the Start Button, Task Manager,
> system...etc.
>
> Thanks In Advance,
> Mark S. Daly
> Daly Computers Network Solutions, LLC.
> Dalycomputers@hotmail.com
>
>

Rock
07-10-2005, 12:49 AM
Mark Daly wrote:

> Doug:
> Thanks for your reply. Your site has helped me many time in the past.
> Running Internet Explorer in Kiosk mode as the shell work great but the user
> still has access to the Task Manager and is able to run explorer.exe which
> gives them access to the Start Menu.
> Is there an easy way to deny access to the Task Manager. I also need to deny
> access to some of the Internet Explorer shortcuts and restrict what sites
> are accessable.
>
> Thanks Again!
> Mark S. Daly
> Daly Computers Network Solutions, LLC.
> Dalycomputers@hotmail.com
>
> "Doug Knox MS-MVP" <dknox@mvps.org> wrote in message
> news:%23I3Fmt6YFHA.2572@TK2MSFTNGP14.phx.gbl...
> See www.dougknox.com, Win XP Tips, Advanced Registry Editing. Then use this
> tip to load the Registry portion for the User profile you wish to restrict.
>
> Then modify the Shell value (you'll probaby have to add the Shell value. Its
> a String value) in the following key in the "loaded" hive:
>
> Software\Microsoft\Windows NT\CurrentVersion\Winlogon
>
> Edit the value to read: "C:\Program Files\Internet
> Explorer\iexplore.exe" -k
>
> Include the quotes as shown. This will force Internet Explorer in Kiosk
> mode to be the shell.
>

To disable task manager run the edit on Kelly's site, line 51, "Disable
Task Manager" at http://www.kellys-korner-xp.com/xp_tweaks.htm

--
Rock
MS MVP Windows - Shell/User

Doug Knox MS-MVP
07-10-2005, 12:49 AM
Mark,

You may also want to check my Windows XP Security Console in the Win XP Utilities section of my web site.

--
Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart Display\Security
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Per user Group Policy Restrictions for XP Home and XP Pro
http://www.dougknox.com/xp/utils/xp_securityconsole.htm
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.

"Mark Daly" <dalycomputers@hotmail.com> wrote in message news:%23cHSK07YFHA.3272@TK2MSFTNGP14.phx.gbl...
> Doug:
> Thanks for your reply. Your site has helped me many time in the past.
> Running Internet Explorer in Kiosk mode as the shell work great but the user
> still has access to the Task Manager and is able to run explorer.exe which
> gives them access to the Start Menu.
> Is there an easy way to deny access to the Task Manager. I also need to deny
> access to some of the Internet Explorer shortcuts and restrict what sites
> are accessable.
>
> Thanks Again!
> Mark S. Daly
> Daly Computers Network Solutions, LLC.
> Dalycomputers@hotmail.com
>
> "Doug Knox MS-MVP" <dknox@mvps.org> wrote in message
> news:%23I3Fmt6YFHA.2572@TK2MSFTNGP14.phx.gbl...
> See www.dougknox.com, Win XP Tips, Advanced Registry Editing. Then use this
> tip to load the Registry portion for the User profile you wish to restrict.
>
> Then modify the Shell value (you'll probaby have to add the Shell value. Its
> a String value) in the following key in the "loaded" hive:
>
> Software\Microsoft\Windows NT\CurrentVersion\Winlogon
>
> Edit the value to read: "C:\Program Files\Internet
> Explorer\iexplore.exe" -k
>
> Include the quotes as shown. This will force Internet Explorer in Kiosk
> mode to be the shell.
>
> --
> Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart
> Display\Security
> Win 95/98/Me/XP Tweaks and Fixes
> http://www.dougknox.com
> --------------------------------
> Per user Group Policy Restrictions for XP Home and XP Pro
> http://www.dougknox.com/xp/utils/xp_securityconsole.htm
> --------------------------------
> Please reply only to the newsgroup so all may benefit.
> Unsolicited e-mail is not answered.
>
> "Mark Daly" <dalycomputers@hotmail.com> wrote in message
> news:%237MeSk6YFHA.3184@TK2MSFTNGP15.phx.gbl...
>>I have a client that want to setup a computer in a public location but
>> restrict it to running only Internet Explorer to access there website and
>> related links.
>> We would like Internet Explorer to run at startup in fullscreen mode,
>> Remove
>> any toolbars, standard buttons...etc. and logoff the user if Internet
>> Explorer is closed or disable closing Internet Explorer.
>> We would like to disable any access to the Start Button, Task Manager,
>> system...etc.
>>
>> Thanks In Advance,
>> Mark S. Daly
>> Daly Computers Network Solutions, LLC.
>> Dalycomputers@hotmail.com
>>
>>
>
>


Restrict user to use only Internet Explorer