Windows 8 and 8.1 Forums

Locking down the computer for public use in a library

  1. #1

    Posts : 6

    Locking down the computer for public use in a library

    I am setting up a computer for use in a public library.
    The OS is Win 8.1 Enterprise.
    Also the computer auto login with a user named "Kiosk".
    And I use local group policy to lock it down.
    The computer is only allowed to run Word, Excel, Powerpoint, Calculator and Internet Explorer.
    I have only white listed those programs in LGPO, blocked the rest for that user.
    The computer is not in a domain, only Internet allowed.

    I changed user rights to block changes and deletion to the desktop icons for that user.
    Muted the sound and disabled the volume icon.
    Turned of sleep mode and used a 10 minute limit sleep mode for the monitor
    Deactivated access to remote assistance and desktop.
    Deactivated file and print sharing.
    Deactivated Windows Search (it turned up misc stuff not wanted).

    In local GPO I deactivated much there.
    But, please fill in suggestions.
    So far:
    Hidden the C-drive.
    USB sticks is allowed.
    All access to misc. user config or settings (Win+X, Win+R).

    Outside local GPO, is there anything I missed?
    Please, let me know.
    Suggestions welcome (even if I have done the already).
    Fire away, people!.

      My System SpecsSystem Spec

  2. #2

    Canon City
    Posts : 249
    Windows 8.1 Pro 64 Bit

    Honestly I think you have done killer job, the only thing I can think of is that if in anyway and some how the user get's asked for "Administrative Privileges" that UAC ask for a password, this can be set through secpol.msc. Off the top of my head I can think of one way to run as a different user which should ask for credentials however you never want to under estimate the end user and there ticks. I know in a domain enviroment it will but you said this is not a domain environment.

    Everything else I think should be handled at the Firewall level, but be careful here as a guy in my state (Colorado) won a case against the Denver library as he was not aloud to hit certain sites thanks to a firewall and being they are public computers funded by the people you cannot have those restrictions.
      My System SpecsSystem Spec

  3. #3

    Posts : 8

    Hello norway2015:

    Good work!

    1.) In that setting, Microsoft's Windows Defender will quite likely under-serve the library and its users. Have plans been made, or executed, to upgrade to a much more effective and on-going anti-virus/malware/spyware/exploit protection process?

    2.) Please seriously consider having a periodically updated/isolated "Bare-metal restore" procedure at the ready.

    3.) Would a fairly resourceful user have the ability to restart the computer using their own bootable media?

    4.) How will the computer connect to the Internet? Wi-Fi? Ethernet cabling to an ISP's modem? Will a router be employed?

    5.) Has the computer's BIOS/UEFI been password protected?

      My System SpecsSystem Spec

  4. #4

    Posts : 6

    I use the SCEP (System Center Endpoint Protection) client on the public computers.
    Mostly because I can and have access to it through work.
    It works also standalone, but be sure to tick the choice in Win Update: Update other Microsoft products.

    I have a similar computer yet to be deployed.
    I need to clone the drive to an image.

    I tried to use CloneZilla on a CD to clone the drive.
    I ended up writing in the BIOS admin password to gain access, so I do not think so.
    And this is right beside the break room for the staff and the library leader office.

    Computer has only access to Internet by Ethernet cable.

    Yes, with a looong password with 4 blocks of characters with spaces between.
    1 name block, one 4-digit block, 1 longer name block, 1 4-digit block.
      My System SpecsSystem Spec

Locking down the computer for public use in a library

Similar Threads
Thread Forum
New computer - unable to connect to public wifi
I purchased a new ASUS laptop a couple of days ago and have been trying to use the hotel wifi where I am staying to do the various updates and installs that new computers require. Unfortunately, while I can connect to my tethered cell phone, I cannot connect to the hotel. I have another...
Network & Sharing
Locking tiles?
I wonder if there is a way to prevent tiles from dragging on the start screen? Hard to believe MS left this out! I often drag or swipe across the start screen and move a tile wo/ intending to. This happens often on the touch screen of my Samsung slate. Not sure if it happens as easily with a...
General Support
Library - Create New Library in Windows 8
How to Create a New Library in Windows 8 Libraries are collections where you can get to all your documents, music, pictures, and other files in one single place. In some ways, a library works like a folder: you can use it to browse and sort files. But unlike a folder, a library gathers files...
HDD locking noise?
I've recently just updated my BIOS on my asus laptop to fix my "ACPI.sys" problem but now, whenever I plug an external USB drive in, or do a hybrid shutdown my hard drive makes 2 loud-ish locking kinda noise (similar to when I turn on my laptop), i'm guessing its the HDD head parking... Should I be...
Drivers & Hardware
cannot access Library folders keep getting LIBRARY-MS File
For some reason if I go to the libraries where is has Documents, Music, Pictures and Video I cannot open anything it just says LIBRARY-MS File. I can access the folders if I click on computer, C drive, users etc. I have tried deleting the -MS files right clicking on Libraries and clicking Restore...
Performance & Maintenance
Library - Set Default & Public Save Locations in Windows 8
How to Set "Default Save Location" and "Public Save Location" for a Library in Windows 8 Libraries are collections where you can get to all your documents, music, pictures, and other files in one single place. In some ways, a library works like a folder: you can use it to browse and sort files....
Chrome locking up in Win 8 Pro x64
hey there guys. well as you can tell, i think chrome is making my system lock up periodically. its not just chrome that locks up either but the entire OS. at first i thought it was Pokki, my start menu replacement but even after a completely clean install of the OS it is still happening and the...
Browsers & Mail

Eight Forums Android App Eight Forums IOS App Follow us on Facebook