how to allow user to run only one program

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

The way to do this is to modify the registry winlogon "shell" value so that
your app loads instead of Explorer. You find this in:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\Winlogon

Unfortunately this is a machine-level entry, there is no equivalent HKCU
entry, so you need to do some further processing to decide which shell to
load according to user. You then need some method of automatically
shutting-down the computer if the app is closed by the user.

You also need to disable several other ways of starting programs via
hotkeys, for example Ctrl-Alt-Del gives Task Manager, which has File..Run
available.

http://mylogon.net in kiosk mode might be a suitable solution. This will
run one app only with NO desktop or taskbar visible, making it quite hard
even for a devious user to start other apps. The thing you still need to
watch is that the app itself might have ways of starting other programs
indirectly, for example by way of a macro language.
 
Hi

I'm using XP pro. I'd like like to create an account where user could do
only one thing - work with certain program and _completely_ nothing except
it (even browse files, run other applications, ad so on) . Is it possible?
I've tried RestrictRun but it's too easy to workaround. gpedit isn't
satisfying, too. Do you have any ideas?
Thanks in advance.
 
Back
Top