Secure and lock down a Windows PC for special use applications (kiosk mode)
Computers & Technology → Technology
- Author Mirabyte Support Team
- Published May 5, 2016
- Word count 808
Windows PCs are commonly used as general purpose computers for all sorts of things like writing letters, editing photos or surfing the Web. However, there are also specialized use cases where the PC is supposed to be used only in a very restricted way. Imagine a public kiosk terminal that may only be used to allow Web browsing or to provide access to a single, specialized application like a booking system. Also terminals in museums or at exhibitions have special requirements in regards to security and functionality. In most cases the underlying operating system (Windows) must be secured and locked down in a way that only a predefined application can be executed and that the end user has no further access to other applications or critical operating system functions.
The Windows operating system itself comes with a number of features that allow locking down and protecting a PC in such a way but these settings are scattered all over the operating system (e.g. in the Windows registry, in configuration files and many other places). Preparing a PC for a specialized use case can be quite challenging and time-consuming.
In this tutorial we show how you can setup a Windows PC for kiosk applications within minutes using the free software tool "FrontFace Lockdown Tool". The Lockdown Tool aggregates all relevant configuration options of Windows for kiosk or digital signage use cases in one intuitive user interface and even allows the creation of configuration profiles so that you can instantly provision a new PC with your predefined configuration settings.
This applies to all Windows versions starting at Windows Vista but also covers Windows 7, Windows 8.1 as well as the current Windows 10. It is also important to state that Windows is not only available as consumer version (such as "Pro" or "Standard") but also in special flavors that are exclusively targeting kiosk or industrial use cases ("Embedded"). But most special features of the embedded versions are also available in the consumer versions and can be configured conveniently using the FrontFace Lockdown Tool. Prior versions of Windows (XP) came with a dedicated kiosk mode (called Windows SteadyState) which is not available any more. But by using the Lockdown Tool it is possible to configure a normal Windows installation in such a way that it resembles the previously available kiosk mode.
After you downloaded FrontFace Lockdown Tool simply start the application (no installation needed) on the PC that you want to lock down. On the left hand side, you find the main menu that groups the various settings that are available into sections like "Startup & Shutdown", "Continuous Operation" and "Protection & Security". You can also select from the dropdown menu below the main menu for which Windows user account you want to apply the changes. It is important to note that some settings affect only the selected user account while others apply to the entire system. All settings are marked with an icon that either shows a PC (for system-wide settings) or a person (for user-specific settings).
You can also select a predefined configuration profile on the start page that appears when you launch the tool. If you want to lock down a kiosk PC, select "Interactive Kiosk Terminal" and then hit "Load Profile". After that, you can browse through all the settings and check if the default values of that profile are fine with you or if you prefer to modify them.
It is recommended to create a separate (restricted) Windows user account. You can then configure the Lockdown Tool to automatically log on with that user account when the PC boots.
In addition to that, you can also select any Windows application to be used as "custom shell". By default, the Windows Explorer is the default shell. If you select another application, the PC will only start that application without start menu, taskbar and desktop. You can select the Internet Explorer (iexplore.exe) or a kiosk application like FrontFace for Touch Kiosks.
Furthermore, you can also set several security options, e.g. you can disable the keyboard shortcut CTRL+ALT+DEL and the Windows key. Please use this setting carefully because it can lead to a point where you are entirely locked out from the PC and have no way to revert your changes unless you revert to the last system restore point using the Windows repair console.
The best setup is to have a restricted kiosk user account that is logged on automatically and a normal administrator user account for management purposes. When the PC starts, keep the SHIFT button pressed to prevent the automatic login. The you can select the admin user, enter your password and start the Lockdown Tool to revert any changes that otherwise might prevent certain administrative tasks that you want to perform. But do not forget to reapply the settings afterwards to secure your system again!
The mirabyte support team provides technical articles and tutorials for various digital signage and kiosk software related topics. The FrontFace products cover digital signage as well as interactive kiosk software for Windows plus some free tools.
Article source: https://articlebiz.comRate article
Article comments
There are no posted comments.
Related articles
- What Are the Features and Tech Stack of Web3 Game in UAE?
- Artsyl Technologies Recognized Among Top Performers in Accounts Payable Automation
- The Role of 5G and Advanced Networks in the United States: Bridging the Digital Divide
- ADA Price Prediction: What Experts Say About Cardano's Future Value
- The Rise of Software to Monitor Employee Computer Activity: Balancing Productivity, Privacy, and Ethics
- Electronic Document Management System: Efficiency and Challenges in the Digital Age
- Why Shift Scheduling Matters: How to Optimize Labor Costs in Business Central
- Green Banking Market: Trends and Opportunities by 2030
- Troubleshooting Common Windows Server Issues: IT Support Services in London for SMBS
- Freight Price Rules in Business Central for Transparent Shipping Costs
- Unlocking the Power of AI: How Artificial Intelligence is Revolutionizing Business Operations
- Top 10 AI Resume Builders for 2025
- How AI-Powered Accounting Software Saves Small Businesses Time and Money
- How to Optimize Your Practice with Healthcare Revenue Cycle Management Solutions
- How Biomethane Aligns Decarbonisation with Circular Economies
- How a Yes No Oracle Can Streamline Your Decision-Making Process
- The Essential Guide to Desktop Hard Drives
- 10 Tips to Maximize Efficiency in Business Central with Maintenance Manager
- Lean Analytics: A Practical Study Guide for Data-Driven Decisions
- Bitcoin Mining Hardware vs. Cloud Mining: Which Option Makes More Sense?
- HIRE A GENUINE CRYPTO RECOVERY SERVICE TO RECOVER FROM FRAUDLENT PLATFORMS; CYBERPUNKÂ PROGRAMMERS
- How to Safeguard Your Tech Infrastructure Against Supply Chain Attacks
- psychophysical space time
- Top Mobile Application Development Company | Expert App Solutions
- Why Modern Businesses in Australia Need an AngularJS Development Company in 2025
- Reaching For The Skies! CNC Machining In Aerospace
- AI-Powered Content Generators: What Are the Opportunities and Challenges?
- Xcode Development services: Riding the Wave of Innovation
- Top 10 Ways Product Configurator Simplifies Manufacturing in Business Central
- One-Way Interviews: A Game-Changer in Modern Hiring