Windows XP for untrusted users

From: steve (steve_at_discussions.microsoft.com)
Date: 05/19/05


Date: Wed, 18 May 2005 15:28:01 -0700

We have a number PC's connected to our network that are available for the
general publics use. They only need access to one application. These
computers and the user logons they use are currently members of Active
Directory. I have used group policy to lockdown these PC's to the best of my
ability. This is relatively sufficient however I would like to remove access
to the start menu and taskbar. I am hoping their is a way to configure these
PC's to act in the same manner as a kiosk does.

So far as I said I've used group policy, looked into using an alternative
shell such as blackbox for windows and finally using no shell and configuring
the application they need to run at logon. The latter seemed the best option
in conjuction with group policy to disable access to task manager however it
appears this application requires a shell to run.

I know their are 3rd party commercial products but it seems to me this
should be possible without throwing money at it. Anyone have
experience,suggestions,links etc. to help me out?

Thanks in advance.



Relevant Pages

  • RE: Custom Shell or Exploror based shell
    ... Add Group Policy Object Editor ... Interface" shell. ... Now I am trying to lock down the single user without limiting ... I will probably use Manual Reseal Technique - install embedded and ...
    (microsoft.public.windowsxp.embedded)
  • Re: I need Ideas on securing a remote Win2k machine
    ... make a group policy temp & ... use group policy setting to secure the users group. ... I would probably setup that application as their shell, ... >> and just remotely administer individual accounts, ...
    (microsoft.public.win2000.security)
  • Re: how to remove taskbar ?
    ... easy way to return the kiosk user to an Explorer shell, ... extra application in group policy for startup but it did not start. ... and then set your custom Group Policy to exclude non-Admin from ...
    (microsoft.public.windowsxp.embedded)
  • Re: Deny windows explorer from users
    ... > How to deny Windows Explorer from users, using AD group policy? ... Change the Shell, ...
    (microsoft.public.windows.group_policy)