Windows KIOSK Mode Question

Windows 8.1 or Windows 10

I am looking at a All-in-One machine that will be going into a financial office for the public to use.

I need a secure and bullet proof KIOSK software to boot into.  

This would need to login and open up "Internet Explorer" and nothing else.  
Locked down to two websites where they will need to submit the details.

I have done this some time ago but not in the last few years and can't find my notes on this.
LVL 1
Mat JonesAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

McKnifeCommented:
You will need to limit outgoing connections to the ip addresses of those 2 domains using the windows firewall. Afterwards, setup assigned access and that's it: www.winbeta.org/news/setup-assigned-access-windows-10-kiosk-mode
0
Mat JonesAuthor Commented:
Thank you for the link, I am following this but the internet is not in the list of installed apps to enable me to launch this?
0
McKnifeCommented:
On Windows 8.1, the modern IE is not in the list? On 10, edge browser is not in that list? I doubt that a little, I must say.
0
ON-DEMAND: 10 Easy Ways to Lose a Password

Learn about the methods that hackers use to lift real, working credentials from even the most security-savvy employees in this on-demand webinar. We cover the importance of multi-factor authentication and how these solutions can better protect your business!

Mat JonesAuthor Commented:
Quick look online is showing that this is yet to be made available but there are shortcuts to run but this can be manipulated by short cut keys...
0
Mat JonesAuthor Commented:
Thanks McKnife, That is the article I was looking at... 100% as much use as a chocolate teapot...

I would of thought IE would be what most people would use the Assigned Access with.

So Microsoft does not fit the bill...

Software Add On it is then...
0
McKnifeCommented:
I tried it on win10 (release 10240, will try release 1511 soon) - it does not work...
https://msdn.microsoft.com/en-us/library/dn449310%28v=winembedded.82%29.aspx?f=255&MSPPError=-2147217396 describes how to use powershell - I did and it seemed to work (command accepted). Logging on that restricted user went to immediate logoff. Buggy. Let me upgrade to 1511 now and see.
0
Mat JonesAuthor Commented:
Cool Thank You...
0
McKnifeCommented:
Might take a while... trying it, I noticed that after upgrading my own machine to 1511, hyper-v (my test machine) broke down (unusable). Will repair and retry.
0
Mat JonesAuthor Commented:
Thank you...
0
McKnifeCommented:
Ok, I tested it and it does not work. Although an app (amazon app via windows store) was installed for that account I am imposing this assigned access on, windows tells me that account has no apps. Strange one. But honestly, I have seen many things go wrong of new windows features, Microsoft's testing needs to be polished.
0
McKnifeCommented:
Whoa. I got it working. Use powershell. Test with the same app (the amazon app) please, so in case something goes wrong, i can assist further.
->Logon as admin, open powershell elevated (in the satrt menu, type powershell, then right click the found powershell and select "run as administrator").
->then fire the command
Set-AssignedAccess -AppName Amazon.com.Amazon -UserName yourtestuser

Open in new window

Then restart the computer and test logging on as yourtestuser.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
McKnifeCommented:
Ok, although you didn't respond, I went on because I was interested:
If we change the rule to match Microsoft Edge, it does not work. Logging on as that restricted user spawns no app, the screen stays clear with the spinning little former hourglass icon. If I logon as admin while that restricted user is still logged in, I can see that the system tries to start edge over and over again: browser broker is appearing many times in the process list. So this is buggy and Microsoft needs to be informed.

My workaround for you: use the google app. As restricted user open the store, enter google. The first hit should be that nicely colored G for the google app. Assign it, using
Set-AssignedAccess -AppName GoogleInc.GoogleSearch -UserName yourtestuser

Open in new window

So you have something at least.
0
McKnifeCommented:
Or: search for "browser" inside the store, there are full blown browsers as well, like "Your Browser"
0
Mat JonesAuthor Commented:
Sorry I got called away on business. Will check this out shortly, sounds great.
0
Mat JonesAuthor Commented:
Thanks for your help McKnife:- Tested it but the project got moved away from me onto one of the other members on the team...

Will keep this as its come up on a few of my contracts before :-)

Again thanks for your advise and help...
0
McKnifeCommented:
FYI

Win10 v1709 Finally supports edge as assigned access program. (1709 is available to the public on october 17th, but already RTM and insiders can install it). Needs to be setup on an elevated powershell:
Set-AssignedAccess -UserName weakusername -AUMID Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge

Open in new window

0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows 8

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.