Windows Steadt State

[vanlanjl]

Question,

I am currently imaging some workstations that we will call Kiosk. I have an account setup on the doamin called kiosk user.

I am trying to use steady state to lock down the users from access to any programs on the desktop. What would be the best way to do this. Is steady state really a viable option? Will it work with domain account users?

 

[NESWalt]

Can you remove the keyboard and mouse so that the user can't run anything (display only), or do they need those? This would not prevent someone from walking up with a mouse and/or keyboard however.

Making sure that the "Kiosk User" has minimal rights on the system and Domain is an important first step. Also, Group Policy Editor on the Domain will be the first place I would start -- assign a group that contains this user and computer and start locking it down so that it can't do anything on the network that you don't want and go from there.