Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

Register Log in
  • Congratulations Chriss Miller on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Web-Browser Only XP Pro 3

Status
Not open for further replies.
Sensibilium

Sensibilium

Programmer
Apr 6, 2000
310
GB
Hi,

I'm attempting to make a networked XP Pro SP2 machine into a potentially publically-accessible web browsing device. I have been looking through group policy to restrict as much as possible but it doesn't appear to cover every setting.

Basically it would be nice to just have the Start button disabled, and just have a lone Firefox icon on the desktop.

Does anyone know of an article anywhere that does this step-by-step? If not, does anyone have any quick-fix ideas?

Also, would it be more advisable to just purchase some other device that I can connect a monitor to and provide web-browsing functionality alone? Preferably the device should cost considerably less than a new PC.

TIA :)

NOTE: The PC currently connects to the net via a NAT ADSL router.

Ahdkaw
 
Sort by date Sort by votes
Hi

I have tried your method in one of our internet cafes in the past and to be honest it has been problematic, it is a cheap solution but it can be broken

I dont know of any articles that could help you fully lock it down but when I read your post it sounded like a kiosk type of solution would help

I found a post on google answers that documents companies that provide demos of their software:


Other than that a better option may be citrix, it may be a little more expensive but you can tailor the desktops to your needs

Companies deploy citrix as its relatively tamper proof providing you lock it down accordingly and it is run through a thin client which allows you to run the desktop on relatively low spec PC

Hope it helps

Regards

Jamie
 
Upvote 0 Downvote
I'm pretty sure there's a linux distro out there that's designed for just this purpose. I'm too busy to google it now. (classic lazy answer!)
 
Upvote 0 Downvote
Some things to look at.

ActiveIcons

WinLock 4.02

Deep Freeze


No access to start button
thread779-871544

Commonly Asked Questions: Public Access Computing

Guest users
thread779-947138


Securing a public computer.



Disabling Downloads
thread779-800996

292504 - Policy Settings for the Start Menu in Windows XP
 
Upvote 0 Downvote
Many thanks!

I shall study each of the links provided from both jdunderhill and linney. :)

As for the linux distro idea, interesting but waaaay too complex for me. I've tried about a thousand *NIX distros but they way beyond my ability to ensure that they are uptodate and secure. It would involve learning an entire new set of skills. Too much like hard work.

W0t, no ph34r emoticon? :D

Ahdkaw
 
Upvote 0 Downvote
I found that disabling the Start button solution doesn't work. Bit of a shame. So instead, I've used group policy to remove everything from the start menu other than internet explorer (kiosk mode).

The only problem now is that whilst I can disable most things in GPO, such as context-menu, etc., I cannot find a way to stop specific keystrokes performed in IE. F1 Help won't stop appearing (which then provides access to the MS site and onwards), the search and history bars are available, but thankfully History is set to 0 days (not sure whether it will still store 'todays' history - don't think it matters anyway, if they are locked into one site), and the search I've managed to replace with an empty text file.

But there are so many keystrokes available, it seems like a lot of hard work just to stop someone pressing the keyboard, so I'm now on the look out for some sort of software which will disable the entire keyboard, perhaps with a facilty to lock/unlock with a password. If anyone has come across anything that does this kind of thing, then please let me know.

Thanks.

Ahdkaw
 
Upvote 0 Downvote
It sounds as if you're trying to use an aircraft carrier to go fishing, if you'll forgive the frivolous analogy. You seem to want a simple web browser and nothing else, yet you're using a full PC with Windows XP Pro to achieve it.

This example won't suit your needs but here in the UK I bought a digital TV adapter for about 60UKP that has an embedded Linux-based OS that includes a web browser. It came with an infra-red keyboard and has a USB port to which you can connect a wireless network adapter or a USB to ethernet bridge. In combination with a cheap TV you could in theory use it as a kiosk browser. Amongst the reasons that it won't suit you are the lack of a mouse, the inability to lock it down to just the browser and the fact that the browser doesn't support all the content you'll find on the web - no flash, for instance.

The reason I mention it is that if there are devices this cheap out there, there are probably other devices in the same price range that will suit your needs. I did a quick Google that came up with a few promising-looking links:


If I were in your position I'd pursue this route, as using a PC with XP Pro seems a bit like using a sledgehammer to crack a nut.

Nelviticus
 
Upvote 0 Downvote
F1 Help won't stop appearing"

Problem registering F12 as a hotkey in Windows XP
thread779-955540

You might have to do something with the File Access Permissions of the exe that runs the various Help programs via the Explorer Help Menu tab when you click on it, rather than removing the tab which is probably coded into Explorer.

For third party programs it might be HH.exe in the Windows Folder.

And possibly Winhelp.exe and Winhelp32.exe.

Other exe that are involved with the inbuilt Windows Help and Support programs are -

Helpctr.exe
Helphost.exe
Helpsvc.exe

Help.exe (for MS-DOS command line help)

There is also the Help And Support Service to check out. Any Firewall program should be able to stop these programs accessing the Internet.


"the search and history bars are available"

There are options under Advanced/ Security in IE to clear the Temporary Internet Files at the end of every session of IE. View/ Toolbars/ Customize, allows removal of Search and History buttons.
 
Upvote 0 Downvote
You are quite correct, Nelviticus, it is like going fishing on an aircraft carrier, but from what I've found on Web-devices such as Dumb Web Terminals seem to be priced at just a little less than an entire PC with XP Pro installed, so it seems a waste of money on something so restrictive.

I've downloaded the PAC software, and I'll be trying it over the next few days, it looks promising but I think it will have to be a part of the entire solution.

I found a place called who have very interesting looking software, to lock down the PC pretty darn tight - it even has a sites allowed/disallowed list, so that should hopefully suit us down to the ground.

Thanks again for everyones followup posts.

Ahdkaw
 
Upvote 0 Downvote
Status
Not open for further replies.

Similar threads

DTGMI
  • Locked
  • Question
WIN 10 Pro PC & Adding back to our Network
Replies
1
Views
856
pjw001
pjw001
Sebastian42
  • Locked
  • Question
Possibly a timing problem
Replies
3
Views
1K
Rick998
Rick998
bobadams52
  • Locked
  • Question
error 12 program swcocx in mas90
Replies
0
Views
511
bobadams52
bobadams52
VicM
  • Locked
  • Question
Problem updating Windows Explorer
Replies
1
Views
916
Nancycaf
Nancycaf
fabiovsilva
  • Locked
  • Question
RDP authentication using Certificates only
Replies
0
Views
233
fabiovsilva
fabiovsilva

Part and Inventory Search

Sponsor

Back
Top