• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1747
  • Last Modified:

Need Kiosk mode or explorer full screen to start automatcally

I'm trying to set up a PC that upon login will open up a web page in full screen so that users will more or less just be able to browse. I'm using w2k pro and IE6. I have heard a lot about kiosk mode but I don't want the user to have to type anything at start/run. If this can be scripted to work that is fine.
0
Brian_Blair
Asked:
Brian_Blair
  • 2
  • 2
  • 2
  • +3
3 Solutions
 
fixnixCommented:
You really need to replace explorer.exe with a system shell designed for such purposes.  Simply starting IE in full screen mode won't prevent alt-tab switching, ctrl-alt-del to bring up task manager, autoruns from popping in a cd (and in some cases a usb drive), etc.  All of the above can be addressed by other means of course, but switching your shell to one that has a good track record and used by some kiosks would be specifically designed for your purposes.  Even those are often succeptable to keyboard buffer overflows on bootup.

Are you willing to use a commercial solution like that or would you rather spend the time to lock down the box as much as you can with the stock shell?  There's a lot more to attempting to secure the box than simply starting IE in full screen mode on startup.

If you chose the "configit yerself" route...we can help but it's far more involved than just a simple reg hack and unchecking a few default settings.
0
 
Brian_BlairAuthor Commented:
thanks for the feedback. Unfortunately a commercail solution isn't possible at this point. I fell like securing the workstation can be done to an acceptable level through group policies.  The situation I am in simply requires that the PC be set up to accomodate anonymous public users who are welcome to browse a website to their hearts content but that it. They won't be using the pc for anything else and they don't need to see anything except the website.
0
 
Here2HelpCommented:
Hey.

You can create a .reg file to do this or alternatively do it manually.

Goto Start>Run>Type 'REGEDIT'

Locate:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

You might see the paths of the applications that are loaded when you start your machine to the right of the screen.

Right click on any where on the right side of hte screen on the white bit then on the menu go to:

New> String Value

Double click your new string value then enter the location of IE plus the kiosk switch.
(Remember if there's spaces in the path ex. C:\Program Files\etc you'll need to use speech marks; "C:\Program Files\etc".

ex.

"C:\Program Files\Internet Explorer\iexplore -k"

If you want a specific page to load except your home page try:

"C:\Program Files\Internet Explorer\iexplore -k www.otherpage.com"

Now when you restart your machine, IE when be launced automatically in Kiosk Mode.
0
When ransomware hits your clients, what do you do?

MSPs: Endpoint security isn’t enough to prevent ransomware.
As the impact and severity of crypto ransomware attacks has grown, Webroot fought back, not just by building a next-gen endpoint solution capable of preventing ransomware attacks but also by being a thought leader.

 
fixnixCommented:
Doing as Here2Help suggests, and having the users logged under the guest account may be secure enough for your needs.
0
 
Rich RumbleSecurity SamuraiCommented:
http://support.microsoft.com/?kbid=154780
iexplore -k http://google.com
Also note:
http://support.microsoft.com/default.aspx?scid=kb;EN-US;q258864

You can make a short-cut to IE with the above command, change google.com to the page of your choice.
-rich

0
 
nader alkahtaniCommented:
I agree with Here2Help  but when you apply his solution it will apply to all users untill Administrators , HKLM ?

Why didn't use Group Policy and User Settings ?
0
 
Brian_BlairAuthor Commented:
NADIR- Where specifically is that setting in group policy that would do the same thing?

Here2- I added the string value and the problem is it doesn't seem to open up explorer after a log in.
"C:\program files\internet explorer\iexplore -k"
0
 
Here2HelpCommented:
Oops sorry my fault.  You MUST include the file extension as well.

"C:\program files\internet explorer\iexplore.exe -k"

I can supply the .reg files so that you can turn this feature on and off at will.  So for the next time you restart the machine IE won't load then on another time it will.
0
 
d_wwCommented:
use group or local policies to lock down the machine then just put a shortcut in the startup folder in the start menu.  that easy.
0

Featured Post

Automating Your MSP Business

The road to profitability.
Delivering superior services is key to ensuring customer satisfaction and the consequent long-term relationships that enable MSPs to lock in predictable, recurring revenue. What's the best way to deliver superior service? One word: automation.

  • 2
  • 2
  • 2
  • +3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now