Kiosk Mode
John C. Watkins
the users of this newsgroup. Still I need more, In Kiosk
Mode, I need a way to disable the Ctrl+E and the Ctrl+H
keystroke. I'm sure that it will have to be done in the
Registry, but I'm unsure of the DWORD values and the
location of the proper key. Thanks for your help.
Shane
Welcome back... I think I MIGHT have found some useful information.. a few things.... (You got me curious w/ your previous
request)
I did a Regedit' for the word 'Search' and found (among MANY other things) the following area:
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\INTERNET EXPLORER\
This area contained a LOT of 'search' information.. so perhaps killing one or two of those keys might work for Ctrl+E... (I've
found that there are sites with information on using the registry.. and recall hearing of a course you can take specifically for
dealing with registries.. you might want to look into that)
I ALSO found this nifty little site:
http://members.aol.com/axcel216/newtip9.htm
Go to it and do a search (Ctrl + F) for 'noresolvesearch' (Note the lack of spaces) and 'history'.. this site lists two key values
for disabling the Search and History stuff. The SEARCH one appears to make it so you can't do a search.. the History one I'm not
so sure about.. but.. here's the thing.. even if you CAN'T disable History.. the history is USELESS if it's EMPTY.. right?????
So.. if you have an 'Autoexec.bat' file on these systems.. I believe you can add the following command:
DELTREE /y c:\(Path to history here)
The '/y' means it won't ask if you're SURE.. and if you deltree the History folder.. then ALL history is wiped EVERY TIME you
power up.. (Although.. if you DO disable search and other functions.. then they can't get to the internet.. and the history should
only include your LAN stuff)
(Even if no Autoexec.bat.. there's GOT to be a way, in the registry, to do that on every power up...)
So, as far as not being able to 'disable' history (in case you can't).. cleaning it out will prevent people from being able to use
it.
ALSO.. this site seems to match some information from the previous.. and has links you can check..:
http://blacksun.box.sk/tutorials/format.php3?file=winsecurity2.html
Good luck!
--
Microsoft Knowledge-Base:
http://support.microsoft.com/default.aspx
Shane
SVarnadoDoYouLik...@LoradMedical.Com
Remove 'DoYouLikeGreenEggsAndSpam' to reply to me.
John C. Watkins <John.C....@state.tn.us> wrote in message news:846701c1bfda$d97a2100$a5e62ecf@tkmsftngxa07...
John C. Watkins
they can't get to the internet, then what's the point...I
am Still working on the Ctrl+E, but the 'noresolvesearch'
did fix another problem that I had forgotten to
mention...it disabled the On the Internet opition, in the
Find/Search expandable menu, in the Start menu...I'm still
reading through the sites that you mentioned but I haven't
found anything yet...Thanks for your help...If you happen
by anything else let me know.
Shane
OHH.. so NoResolveSearch kept the internet from being a selection in the 'find/search' menu.. cool.. solutions accidentally
found are sometimes the best.. but, it didn't take care of the 'Ctrl+E', huh?? OK.. I'll keep checking around.. might find
something..
--
Microsoft Knowledge-Base:
http://support.microsoft.com/default.aspx
Shane
SVarnadoDoYouLik...@LoradMedical.Com
Remove 'DoYouLikeGreenEggsAndSpam' to reply to me.
John C. Watkins <John.C....@state.tn.us> wrote in message news:975d01c1c06a$82699b30$9ee62ecf@tkmsftngxa05...
Shane
OOOPS.. pardon this GLARING error on my part.. I don't know what operating systems you're running.. but there ARE ways of
getting around Kiosk, for those who know how.. OK??? I don't recall if, in previous messages, you've indicated that these are
already taken care of. Heres some info you're gonna want to consider:
1. Some OS's have an option for 'Address Bar in TaskBar' (I think you right-click on the Taskbar and select 'Toolbars' and
'Address') and you can have an Internet Explorer Address bar on your taskbar.. good way to access the internet. It's not a problem
in Kiosk mode.. but once IE is off.. that's a different story.
2. Right-click on the Internet Explorer icon and select 'Advanced', then UNselect 'Show Internet Explorer Icon on Desktop'
because that Icon will NOT allow you to change it's path (to my knowledge), so you can't add the '-k' for kiosk. You should create
a NEW Icon on the desktop who's path is 'C:\Program Files\Inetexplorer.exe -k' (or whatever the path is).. (alternately... I
suppose there's a registry key that you can change to make it so that ANY time someone tries to run IExplore.exe, they'll
automatically have the '-k' added)
3. Ability to access those Internet Explorer settings through the Control panel is going to be a problem.. because then they can
change them..... you can find 'Inetcpl.cpl' and rename it 'inetcpl2.cpl' or something.. then, if they try to get to Internet
Properties.. the system can't find the file. 'cpl' appears to be a 'Control Panel Link' or something.. all I know is, once you've
set up Internet Options.. if you remove that file, then the system can't FIND the options anymore!!
4. The 'RUN" command.. (STart Button\Run).. how ARE you going to deal with THAT? (Or has it been dealt with and I forgot??)..
all I have to do is hit that, and type 'Iexplore.exe' and I"m in Interenet Explorer NOT in kiosk mode!! (That's where a registry
setting would come in REAL handy). I think theres a way to disable that. but don't know..
5. Have you considered such programs as Win-U? (That program itself is old and easily bypassed). programs of that nature run
your COMPUTER in 'Kiosk' mode.. allowing you access not even to the Taskbar.. you'd create a set of buttons (links) on the kiosk
desktop and specify things like 'Kiosk mode' in Internet Explorer.. There have GOT to be some out there.. heck.. even NetNanny
(and such) have GOT to be configurable so that if a person types in ANY internet address (www), they'll be refused...
Take a close look at the possibility that you can edit the registry so that ANY time someone accesses Inetexplorer.exe,, it will
AUTOMATICALLY be in kiosk mode.. that SHOULD take care of the 'Address Bar' question and RUN command question.
and.. no.. I still haven't figured out anything about the Search thing.
--
Microsoft Knowledge-Base:
http://support.microsoft.com/default.aspx
Shane
SVarnadoDoYouLik...@LoradMedical.Com
Remove 'DoYouLikeGreenEggsAndSpam' to reply to me.
John C. Watkins <John.C....@state.tn.us> wrote in message news:975d01c1c06a$82699b30$9ee62ecf@tkmsftngxa05...
John C. Watkins
It wasn't an error I just forgot to say, but we are
running Windows 2000 SP2. We have been trying to get this
for about 3 weeks now, and I finally think that we have
found all the little ways into IE outside the Kiosk Mode.
The Ctrl+N, Ctrl+L, Ctrl+O, Ctrl+B, Ctrl+I(I reall don't
know what that even did), the On The Internet; in the
Start Menu, Right Click; Open in New Window, No Toolbar,
No Address Bar, No Links Bar, No Favorites, No Search
Button in toolbar, No Favorites Button in toolbar, No
History Button in toolbar, No Internet Options from the
Tools menu, No File New, No F3, No adding or customizing
toolbars, all disabled with Registry Hacks.
We are very Close to getting this nailed down...we have 2
things left and one that is not a have to have...the first
2 are the Ctrl+E, to disable the search window and Locking
down the homepage so that the users can't change it and
the other is the -k in the Registry so that it forces all
the IE windows to open in Kiosk...The Internet Options in
the Control Panel is a problem, but that's part of the
locking down the homepage and with a few more 'Hacks' we
can disable most if not all the tabs in Options.
If you would like i can send you a finished list of all
the things that we did to get this to work, in case
someone else want to try and do what we are doing or just
for your own peace of mind.
Thanks for all your help...any more Ideas let me know.
John
>am Still workiÍ{ wÀ ¬ ÿ!ì͵ Ð : °ìó<ng on the
Shane
It sounds like you're getting somewhere.. that's good. There are some 'hostile' scripts at web-sites that have been 'forcibly'
changing peoples' home-page and refusing to let you change it back.. so, there MUST be a way.. but, as I said in the previous.. if
you simply rename 'inetcpl.cpl', then they're going to have a lot of trouble. Then there is NO "Option's at ALL.. (intetcpl.cpl
apparently is what controls that box).
Yes.. if you end up with a list of what you did to get all of this set up, I'd appreciate seeing a copy.
Here is a registry key a friend suggested as a possible means for disabling the 'search' function.. he said to look into it (if
it exists on your system) and see if there are values there that would be helpful:
HKEY_Current_User\Software\Microsoft\Internet Explorer\Common\Open Find
Shane
SVarnadoDoYouLik...@LoradMedical.Com
Remove 'DoYouLikeGreenEggsAndSpam' to reply to me.
John C. Watkins <John.C....@state.tn.us> wrote in message news:9ce801c1c08c$39b82b50$9ae62ecf@tkmsftngxa02...
John
>am Still workiﾍ{掫ﾀ ｬ !�ﾍｵ ﾐ : ｰ��ng on the
John C. Watkins
Yeah we're getting close...I tried to rename
the 'inetcpl.cpl', but W2K somehow reassociates the file
with Internet Options...No problem in sending you a list,
you helped me come up with most of it...The Reg key did
not exist...I thought about creating it but i wouldn't
know what to add to it. Thanks
John
S Taylor
response, instead of to the ng. Again, I appologize
Heres a few more registry settings
Open your registry and find the key below.
Create a new DWORD value based on the options below, and set the new value
to equal "1" to enable the restriction or "0" to disable the restriction.
Note: These restrictions can be used either on a user by user basis by
adding them to HKEY_CURRENT_USER or on a computer wide basis by adding them
to HKEY_LOCAL_MACHINE
Key: [HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet
Explorer\Restrictions
Type: REG_DWORD (DWORD Value)
Value: (0 = disable restriction, 1 = enable restriction)
NoBrowserClose - Disable the option of closing Internet Explorer.
NoBrowserContextMenu - Disable right-click context menu.
NoBrowserOptions - Disable the Tools / Internet Options menu.
NoBrowserSaveAs - Disable the ability to Save As.
NoFavorites - Disable the Favorites.
NoFileNew - Disable the File / New command.
NoFileOpen - Disable the File / Open command.
NoFindFiles - Disable the Find Files command.
NoSelectDownloadDir - Disable the option of selecting a download directory.
NoTheaterMode - Disable the Full Screen view option.
NoAddressBar - Disable the address bar.
NoToolBar - Disable the tool bar.
NoLinksBar - Disable the links bar.
These tweaks allows you to control access to the Internet Explorer setup and
control panel functions (found under Tools -> Internet Options).
These restrictions can be used either on a user by user basis by adding
them to HKEY_CURRENT_USER or on a computer wide basis by adding them to
HKEY_LOCAL_MACHINE.
Create a new DWORD value based on the options below, and set the new value
to equal "1" to enable the restriction or "0" to disable the restriction.
Settings:
Key: [HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet
Explorer\Control Panel
Type: REG_DWORD (DWORD Value)
Value: (0 = disable restriction, 1 = enable restriction)
Advanced
Autoconfig
Cache
CalendarContact
Certificates
Check_If_Default
Colors
Connection Settings
Connection Wizard
Fonts
History
HomePage
Languages
Links
Messaging
Profiles
Proxy
Ratings
Wallet
"Accessibility" - disables all options under Accessibility
"GeneralTab" - removes General tab
"SecurityTab" - removes Security tab
"ContentTab" - removes Content tab
"ConnectionsTab" - removes Connections tab
"ProgramsTab" - removes Programs tab
"AdvancedTab" - removes Advanced tab
"CertifPers" - prevents changing Certificate options
"CertifSite" - removes the Personal tab from Certificate manager
"SecChangeSettings" - prevents changing Security Levels for the Internet
Zone
"SecAddSites" - prevents adding Sites to ANY zone
"FormSuggest" - disables AutoComplete for forms
"FormSuggest Passwords" - prevents Prompt me to save password from being
displayed
"Connwiz Admin Lock" - disables the Internet Connection Wizard
"Settings" - prevents any changes to Temporary Internet Files
"ResetWebSettings" - disables the Reset web Setting button
You may need to restart Windows for the changes to take effect.
This restriction allows you to remove the search button from the "Standard
Buttons" toolbar in Windows explorer.
Key:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explor
er
Name: NoShellSearchButton
Type: REG_DWORD (DWORD Value)
Value: (0 = display, 1 = remove)
By right clicking on a toolbar you are usually given the option to
Customize, which allows you to change which functions are available from the
toolbar. This tweak allows you to disable that function.
Key:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explor
er
Name: NoToolbarCustomize
Type: REG_DWORD (DWORD Value)
Value: (1 = enable restriction)
By default users are able to select which toolbars are displayed either be
right clicking the toolbar itself, or by changing the options from the View
menu. This tweak locks the toolbars, removing the ability to change which
are displayed.
Open your registry and find the key below.
Create a new value named "NoBandCustomize" and set it to equal "1" to enable
the restriction.
Key:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explor
er
Name: NoBandCustomize
Type: REG_DWORD (DWORD Value)
Value: (1 = enable logging )
Remove the Run Command from the Start Menu (All Versions)
Removes the user's ability to start applications or processes from the Start
menu by removing the option completely.
Note: If the user still has access to the MS-DOS prompt icon or command
prompt, the user can start unauthorized applications.
Key:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explor
er
Name: NoRun
Type: REG_DWORD (DWORD Value)
Value: (0 = disabled, 1 = enabled)
This setting allows you to disable the use of the MS-DOS command prompt in
Windows.
Create a new DWORD value, or modify the existing value, named "Disabled" and
set it to "1" to disable the command prompt or to re-enable it again later
change the value to "0".
Key:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\WinOld
App
Name: Disabled
Type: REG_DWORD (DWORD Value)
Value: (0 = disable, 1 = enable)
This tweak allows you to show or hide any of the applets found in the
Windows Control Panel.
For each applet you want to hide create a new string value and call it the
filename of the applet to be hidden (for example 'fax.cpl'). Set the value
to equal 'No' to hide the applet or 'Yes' to display it.
example:
fax.cpl
powercfg.cpl
Key: [HKEY_CURRENT_USER\Control Panel\don't load
Type: REG_SZ (String Value)
Value: Yes or No
There were direct quotes from th Windows Registry Helper from
www.regedit.com
John
>Shane
>SVarnadoDoYouLik...@LoradMedical.Com
>Remove 'DoYouLikeGreenEggsAndSpam' to reply to me.
>
Shane
to this question!!! Pardon me while I laugh myself silly for not trying the obvious!!
Thank you very much Ravenshadow!
--
Microsoft Knowledge-Base:
http://support.microsoft.com/default.aspx
Shane
SVarnadoDoYouLik...@LoradMedical.Com
Remove 'DoYouLikeGreenEggsAndSpam' to reply to me.
S Taylor <ravensh...@hotmail.com> wrote in message news:eWdHIDSwBHA.2208@tkmsftngp05...
S Taylor
"Shane" <svarnadoDoYouLik...@loradmedical.com> wrote in
message news:#UOqpjSwBHA.2676@tkmsftngp04...