Restrict user to use only Internet Explorer

[Mark Daly]

I have a client that want to setup a computer in a public location but
restrict it to running only Internet Explorer to access there website and
related links.
We would like Internet Explorer to run at startup in fullscreen mode, Remove
any toolbars, standard buttons...etc. and logoff the user if Internet
Explorer is closed or disable closing Internet Explorer.
We would like to disable any access to the Start Button, Task Manager,
system...etc.

Thanks In Advance,
Mark S. Daly
Daly Computers Network Solutions, LLC.
(e-mail address removed)

 

[Doug Knox MS-MVP]

See www.dougknox.com, Win XP Tips, Advanced Registry Editing. Then use this tip to load the Registry portion for the User profile you wish to restrict.

Then modify the Shell value (you'll probaby have to add the Shell value. Its a String value) in the following key in the "loaded" hive:

Software\Microsoft\Windows NT\CurrentVersion\Winlogon

Edit the value to read: "C:\Program Files\Internet Explorer\iexplore.exe" -k

Include the quotes as shown. This will force Internet Explorer in Kiosk mode to be the shell.

 

[Mark Daly]

Doug:
Thanks for your reply. Your site has helped me many time in the past.
Running Internet Explorer in Kiosk mode as the shell work great but the user
still has access to the Task Manager and is able to run explorer.exe which
gives them access to the Start Menu.
Is there an easy way to deny access to the Task Manager. I also need to deny
access to some of the Internet Explorer shortcuts and restrict what sites
are accessable.

Thanks Again!
Mark S. Daly
Daly Computers Network Solutions, LLC.
(e-mail address removed)

See www.dougknox.com, Win XP Tips, Advanced Registry Editing. Then use this
tip to load the Registry portion for the User profile you wish to restrict.

Then modify the Shell value (you'll probaby have to add the Shell value. Its
a String value) in the following key in the "loaded" hive:

Software\Microsoft\Windows NT\CurrentVersion\Winlogon

Edit the value to read: "C:\Program Files\Internet
Explorer\iexplore.exe" -k

Include the quotes as shown. This will force Internet Explorer in Kiosk
mode to be the shell.

 

[Rock]

Doug:
Thanks for your reply. Your site has helped me many time in the past.
Running Internet Explorer in Kiosk mode as the shell work great but the user
still has access to the Task Manager and is able to run explorer.exe which
gives them access to the Start Menu.
Is there an easy way to deny access to the Task Manager. I also need to deny
access to some of the Internet Explorer shortcuts and restrict what sites
are accessable.

Thanks Again!
Mark S. Daly
Daly Computers Network Solutions, LLC.
(e-mail address removed)

See www.dougknox.com, Win XP Tips, Advanced Registry Editing. Then use this
tip to load the Registry portion for the User profile you wish to restrict.

Then modify the Shell value (you'll probaby have to add the Shell value. Its
a String value) in the following key in the "loaded" hive:

Software\Microsoft\Windows NT\CurrentVersion\Winlogon

Edit the value to read: "C:\Program Files\Internet
Explorer\iexplore.exe" -k

Include the quotes as shown. This will force Internet Explorer in Kiosk
mode to be the shell.

To disable task manager run the edit on Kelly's site, line 51, "Disable
Task Manager" at http://www.kellys-korner-xp.com/xp_tweaks.htm

 

[Doug Knox MS-MVP]

Mark,

You may also want to check my Windows XP Security Console in the Win XP Utilities section of my web site.