Domain/Forest Functional Level 2003
All DC's 2003
Workstation OS Windows 7 Pro
Joined to Domain
I have a unique situation. We currently have a Kiosk machine that has been locked down via Group policy. We also have a generic user called "kioskuser" which Auto Logs on to the domain.
We do not want any users being able to "Log off" or "Shutdown" or "Switch User" so they have been disabled Via group policy. The only setting that they can do it "restart" the machine, which then auto logs on to the "kioskuser" upon startup.
Becuase we have locked down a bunch of settings with group policy, I would like to know if there is anyway to have a Shortcut on the desktop of "kioskuser" that can only be invoked from the RunAs command. Meaning, I do not want the "kioskuser" to be able to launch this Shortcut "switch user" without typing administrative credentials.
I have been testing this out by have not been able to get it working as needed.
If anyone has any ideas on this issue it would be greatly apprecaited.