Kiosk PC, OPAC only

Using directions from IUG:

We lock down IE's Internet options with a simple reg hack:

-----------------------IE5Restr.reg--------------------

REGEDIT4

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Restrictions]

NoBrowserOptions"=dword:00000001

-------------------------------------------------------

You can also restrict other aspects of IE (NoBrowserClose, NoBrowserContextMenu,

NoBrowserSaveAs, NoFavorites, NoFileNew, NoFileOpen, NoFindFiles, NoTheaterMode,

NoSelectDownloadDir). The "1" in the entry above means it's enabled - use a "0" to disable it and

allow Browser Options.

It takes all of a couple of minutes.

Reg files for enabling and disabling various options are below.

-----------------------IE5Restr.reg--------------------

REGEDIT4

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Restrictions]

"NoBrowserClose"=dword:00000000

"NoBrowserContextMenu"=dword:00000001

"NoBrowserOptions"=dword:00000001

"NoBrowserSaveAs"=dword:00000000

"NoFavorites"=dword:00000000

"NoFileNew"=dword:00000001

"NoFileOpen"=dword:00000000

"NoFindFiles"=dword:00000001

"NoSelectDownloadDir"=dword:00000000

"NoTheaterMode"=dword:00000001

This file ENABLES the restrictions, the one below DISABLES them:

-----------------------IE5NoRestr.reg--------------------

REGEDIT4

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Restrictions]

"NoBrowserClose"=dword:00000000

"NoBrowserContextMenu"=dword:00000000

"NoBrowserOptions"=dword:00000000

"NoBrowserSaveAs"=dword:00000000

"NoFavorites"=dword:00000000

"NoFileNew"=dword:00000000

"NoFileOpen"=dword:00000000

"NoFindFiles"=dword:00000000

"NoSelectDownloadDir"=dword:00000000

"NoTheaterMode"=dword:00000000

Login Directly Into Windows 7 Without Entering Password

Have several lobby PCs where it is open to public (locked down with Deep Freeze & Proxy table), here are steps to Login Directly Into Windows 7 Without Entering Password 



Every time Windows 7 is started it asks you to select the username and enter the password to access your system, there is no doubt that it is a very important security measure, but what if you are the only user
of your system?  In windows 7, you can easily get rid of the login prompt window, go through the following steps to achieve it.

Go to Start and type netplwiz in the Start Search and hit Enter. The User Accounts dialogue box will be displaye, just uncheck "Users must ..."  box



autologin

How to limit access to public PC? (Kiosk)

Our library has small number of Windows PCs totally open to public.  We want to limit them to *.edu and specific .com sites (databases, etc).  We had manually entered list of valid domains in each computer, but keeping updated was a pain.

Now we use an Automatic Configuration Script, basically its a javascript which says which domains are allowed.

1. Samples of scripts & syntax.  (Can be used to block ads & porn, another)
2. Place on webserver  (have to add .PAC extension to mime types)
3. Then add to PC, we just use IE:  Configuring IE, Firefox, & other browsers

Dont forget to allow *.microsoft.com (updates), and your anti-virus update domain to PAC script.

Here is script we use:

//2011-Jan   List of allowed sites for CUA Law Library
//Len Davidson   x-6206
//
function FindProxyForURL(url, host)
{
if (isPlainHostName(host))
return "DIRECT";
else if (shExpMatch(url,"*cardinalmail*"))
return "DIRECT";
else if (shExpMatch(url,"*jsapi*"))
return "DIRECT";
else if (shExpMatch(url,"*google-analytics*"))
return "DIRECT";
else if (shExpMatch(host, "*.gov"))
return "DIRECT";
else if (shExpMatch(host, "*.us"))
return "DIRECT";
else if (shExpMatch(host, "*.org"))
return "DIRECT";
else if (shExpMatch(host, "*.edu"))
return "DIRECT";
else if (shExpMatch(host, "*.int"))
return "DIRECT";
else if (shExpMatch(host, "*.adobe.com"))
return "DIRECT";
else if (shExpMatch(host, "*.macromedia.com"))
return "DIRECT";
else if (shExpMatch(host, "*.microsoft.com"))
return "DIRECT";
else if (shExpMatch(host, "*.newsbank.com"))
return "DIRECT";
else if (shExpMatch(host, "*.bna.com"))
return "DIRECT";
else if (shExpMatch(host, "*.cch.com"))
return "DIRECT";
else if (shExpMatch(host, "*pf.com"))
return "DIRECT";
else if (shExpMatch(host, "*lexis-nexis.com"))
return "DIRECT";
else if (shExpMatch(host, "*.lexisnexis.com"))
return "DIRECT";
else if (shExpMatch(host, "*.lexis.com"))
return "DIRECT";
else if (shExpMatch(host, "*.silverplatter.com"))
return "DIRECT";
else if (shExpMatch(host, "*.odyssi.com"))
return "DIRECT";
else if (shExpMatch(host, "*.hwwilsonweb.com"))
return "DIRECT";
else if (shExpMatch(host, "*.indexmaster.com"))
return "DIRECT";
else if (shExpMatch(host, "*.irlweb.com"))
return "DIRECT";
else if (shExpMatch(host, "*.bvdep.com"))
return "DIRECT";
else if (shExpMatch(host, "*.galegroup.com"))
return "DIRECT";
else if (shExpMatch(host, "*.westlaw.com"))
return "DIRECT";
else if (shExpMatch(host, "*.loislawschool.com"))
return "DIRECT";
else if (shExpMatch(host, "*.paradigmpub.com"))
return "DIRECT";
else if (shExpMatch(host, "*.wrlc.org"))
return "DIRECT";
else if (shExpMatch(host, "*.wmata.com"))
return "DIRECT";
else if (shExpMatch(host, "*.googlesyndicatedsearch.com"))
return "DIRECT";
else if (shExpMatch(host, "*.windowsupdate.com"))
return "DIRECT";
else if (shExpMatch(host, "*.update.microsoft"))
return "DIRECT";
else if (shExpMatch(host, "windowsupdate.microsoft.com"))
return "DIRECT";
else if (shExpMatch(host, "*.symplicity.com"))
return "DIRECT";
else if (shExpMatch(host, "*.live.com"))
return "DIRECT";
// else if (shExpMatch(host, "*.com"))
//return "PROXY comproxy:80";
else
return "PROXY PROXY comproxy:80"; }