Kiosk-style XP PC?

[tarquel]

Hi all

Just wondering what people do regarding kiosk style pc's....

After mentioning the library system to you all...and starting to set it (the pc) up yesterday, I was thinking how its gonna work.

Because I dont want the library pc to be used for anything more than searching the library db, using Eclipse, and using the Internet possibly, I was thinking of having a fixed library user - non-logoff-able.

Any thoughts regarding this as it's hurting my head at the moment - too tired to think lol

All I can think so far is that I want it on the domain and I think the best setup in this case is using the install locally but backing up to a network share option (I'm just about to install the software).

Cheers,
Nath

[Geoff]

Linux thin client.

[Ric_]

Create an AD user that can only logon to that machine. Then change the shell for that user to eclipse.

You can then set the machine to autologon as the domain user (you will be able to hold down shift at startup to bypass this). Sysinternals have a gubbin for helping you automate this process, rather than trawling through the registry.

[Geoff]

Links man!

[mark]

hmm - my librarian uses VNC to control her machines and access to the print queue to control that too.

She also needs excel to compile book orders... sims to do the finance stuff she now does... hmmm - nearly a full PC then!

You could lock down a logon to have those few apps easily by policy. Not quite a kiosk but...

I lock in all my staff to the 1 PC to log into.

[tarquel]

Ric_'s suggestion looks to be the best one. I shall give it a go inna bit once I work out how to use Eclipse lol

Cheers,
N.

[Ric_]

Ric_'s suggestion looks to be the best one. I shall give it a go inna bit once I work out how to use Eclipse lol

Cheers,
N.

Eclipse is easy and it looks after itself (until it downloads an update and you have to log on as admin the first time that the prog runs!)

[tarquel]

As multiple users are gonna be using it, my kiosk idea is probably not gonna work.

What I would like to be able to do is assign only certain users to be able to log on to the machine and if anyone else tries, it either just logs them straight off when they log on or (preferably) gives them a error message i.e.:

You are not authorised to use this computer!! If you feel this is in error, please contact the ICT Department! [Error code: 05]

Is this possible with GP somehow? I had a quick look before but didnt see anything of use (may have missed something as it was a quick look)

Cheers,
N.

[ChrisH]

You can lock down the desktop to be enough to be kiosk modes + a few extra tweaks. I used to have a guide but havent got it to hand at the mo. But obviously your just going to be really restrictive and use software restriction policys etc.

[mark]

As far as I know that's right Tarq. You can limit a user to a machine, but not limit the machine to specified users - from the server - perhaps you can do it from the client??

[ChrisH]

If you use a terminal session then you can probably restrict the users the way you want.

[tarquel]

Dont use TS I'm afraid here...

Don't worry - I'll find a way of doing it somehow..

Cheers
Nath

[RobC]

As far as I know that's right Tarq. You can limit a user to a machine, but not limit the machine to specified users - from the server - perhaps you can do it from the client??

If you want to limit logon to only certain users, put the machine in an OU of its own in AD & then create a new GPO for that OU.
Head to the following:

Computer Configuration, Windows Settings, Security Settings, Local Settings, User Rights Assignment

Double click on Log On Locally & put a tick in the Define these policy settings. You can now use the add/remove buttons to populate the list with those users/groups you want to be able to log onto the machine.

You can also specifically deny logon to users/groups using the Deny Log On Locally object in the same location.

[mark]

Fantastic - that's gonna get some use around here now

Thanks Rob - go next door and have a whisky on me

[tarquel]

Mark - I didn't know theres a pub next to the school!? or is there one next to you RobC?

I'll give ya a double

Thanks very muchly - thats gonna save me sooo much searching through the GP settings and like mark says, will get used a lot by me

Cheers,
Nath