How to limit access to public PC? (Kiosk)

Our library has small number of Windows PCs totally open to public.  We want to limit them to *.edu and specific .com sites (databases, etc).  We had manually entered list of valid domains in each computer, but keeping updated was a pain.

Now we use an Automatic Configuration Script, basically its a javascript which says which domains are allowed.

1. Samples of scripts & syntax.  (Can be used to block ads & porn, another)
2. Place on webserver  (have to add .PAC extension to mime types)
3. Then add to PC, we just use IE:  Configuring IE, Firefox, & other browsers

Dont forget to allow *.microsoft.com (updates), and your anti-virus update domain to PAC script.

Here is script we use:

//2011-Jan   List of allowed sites for CUA Law Library
//Len Davidson   x-6206
//
function FindProxyForURL(url, host)
{
if (isPlainHostName(host))
return "DIRECT";
else if (shExpMatch(url,"*cardinalmail*"))
return "DIRECT";
else if (shExpMatch(url,"*jsapi*"))
return "DIRECT";
else if (shExpMatch(url,"*google-analytics*"))
return "DIRECT";
else if (shExpMatch(host, "*.gov"))
return "DIRECT";
else if (shExpMatch(host, "*.us"))
return "DIRECT";
else if (shExpMatch(host, "*.org"))
return "DIRECT";
else if (shExpMatch(host, "*.edu"))
return "DIRECT";
else if (shExpMatch(host, "*.int"))
return "DIRECT";
else if (shExpMatch(host, "*.adobe.com"))
return "DIRECT";
else if (shExpMatch(host, "*.macromedia.com"))
return "DIRECT";
else if (shExpMatch(host, "*.microsoft.com"))
return "DIRECT";
else if (shExpMatch(host, "*.newsbank.com"))
return "DIRECT";
else if (shExpMatch(host, "*.bna.com"))
return "DIRECT";
else if (shExpMatch(host, "*.cch.com"))
return "DIRECT";
else if (shExpMatch(host, "*pf.com"))
return "DIRECT";
else if (shExpMatch(host, "*lexis-nexis.com"))
return "DIRECT";
else if (shExpMatch(host, "*.lexisnexis.com"))
return "DIRECT";
else if (shExpMatch(host, "*.lexis.com"))
return "DIRECT";
else if (shExpMatch(host, "*.silverplatter.com"))
return "DIRECT";
else if (shExpMatch(host, "*.odyssi.com"))
return "DIRECT";
else if (shExpMatch(host, "*.hwwilsonweb.com"))
return "DIRECT";
else if (shExpMatch(host, "*.indexmaster.com"))
return "DIRECT";
else if (shExpMatch(host, "*.irlweb.com"))
return "DIRECT";
else if (shExpMatch(host, "*.bvdep.com"))
return "DIRECT";
else if (shExpMatch(host, "*.galegroup.com"))
return "DIRECT";
else if (shExpMatch(host, "*.westlaw.com"))
return "DIRECT";
else if (shExpMatch(host, "*.loislawschool.com"))
return "DIRECT";
else if (shExpMatch(host, "*.paradigmpub.com"))
return "DIRECT";
else if (shExpMatch(host, "*.wrlc.org"))
return "DIRECT";
else if (shExpMatch(host, "*.wmata.com"))
return "DIRECT";
else if (shExpMatch(host, "*.googlesyndicatedsearch.com"))
return "DIRECT";
else if (shExpMatch(host, "*.windowsupdate.com"))
return "DIRECT";
else if (shExpMatch(host, "*.update.microsoft"))
return "DIRECT";
else if (shExpMatch(host, "windowsupdate.microsoft.com"))
return "DIRECT";
else if (shExpMatch(host, "*.symplicity.com"))
return "DIRECT";
else if (shExpMatch(host, "*.live.com"))
return "DIRECT";
// else if (shExpMatch(host, "*.com"))
//return "PROXY comproxy:80";
else
return "PROXY PROXY comproxy:80"; }