KIOSK MODE?

  • Thread starter Thread starter zuke
  • Start date Start date
Z

zuke

In a W2K AD network, can a PC be hooked up in a "kiosk mode" such that only
one application can be used?
 
Hi Zuke,

Thanks for posting here. Sorry for my delayed response due to the weekend.

From your post, my understanding of this issue is: You would like to know
how to restrict a PC to run only one program in Win2K AD. If this is not
correct, please feel free to let me know.

Based on my experience, it might be difficult to perform this restriction
in Win2K AD without third-party specific software. But there are Software
Restriction Policies in Win2K3. For more information, please see:

Software Restriction Policies
<http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/Serv
erHelp/9c25d487-eb0b-4e2d-a5f7-89b2686d6a69.mspx>

However, in Win2K AD, you may try to use Group Policy to lock down the
desktop (just remain one shortcut for your application), remove unneeded
items from Start Menu, hide hard drives and so on. And then, the user may
not run other applications if he is not an expert and has insufficient
privileges. For more information about how to do these policies, you may
refer to the following Microsoft web site:

Windows 2000 Group Policy Reference
http://msdn.microsoft.com/library/en-us/gp/default.asp

Hope this helps!

Have a nice day!

-------------------------------------------------------
Please note that the newsgroups are staffed weekdays by Microsoft Support
professionals to answer your non-urgent, break/fix systems and applications
questions. Our goal is to provide 24 hour response to all questions.

If this response time does not meet your needs, please contact Customer
Service and Support (CSS) for more immediate assistance. For more
information on available CSS services, please click here:
http://support.microsoft.com/default.aspx?scid=fh;EN-US;OfferProPhone#faq607
 
Yes their is no SRP in Windows 2000. What the user could try is to use the
Group Policy setting under user configuration/administrative
templates/system - run only allowed Windows applications after reading the
full explanation of the setting and adding iexplorer.exe to that list.
However the user could be able to run any executable that is named
iexplorer.exe on the computer - authorized or not though this is still a
workable solution particularly if the user is not a local administrator or
power user and other restrictions are enabled such as not being able to run
the command prompt and using ntfs restrictions. --- Steve
 
So, I wanted to let a laptop in a physcally public place access one folder
on a server in my LAN. What I did do was to go to every top-level share and
disallow access from the user account that would be logging onto the laptop.
This took the better part of a day. It works.

Then I went to the executables on the laptop I wanted excluded and did the
same.

Then I blocked all users but two from logging onto the laptop.

Not a great method, but it works.

I'm surprised few others want to do stuff like this.

Regards,
Zuke
 
Microsoft has a great solution for kiosk computers but it will only work on
XP SP2 and is called Shared Computer Toolkit for XP. I tried it out a bit
and so far the results are impressive. One thing I like is that you can
easily restrict a users from running any executable outside of the program
files folder or system folder. See the link below if you are
nterested. --- Steve

http://www.microsoft.com/windowsxp/sharedaccess/overview.mspx
 
That Shared access tool looks very exciting. Most of my desktops are shared.

Thanks for the tip

-Zuke
 
Back
Top