Controlling the Start Menu

[Guest]

Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

I work in a public library and am working on a Windows-based method of
providing timed Internet sessions for the public as a replacement for
some commercial software. Basically, I want to replace Internet
Explorer with a VBscript I've written. Using networked profiles and
Group Policy, I have been successful at getting the desktop pinned
down, but I'm running into problems getting control of the Start Menu.
Even though the Start Menu is empty on my networked profile and the
"All Users" and "Default Users" Documents and Settings folders on the
end-user PCs, Windows XP appears to automatically generate Start Menu
links to Internet Explorer the first time I log into the computer after
each reboot. I've tried using a logon script to delete the link, but
it seems that the script executes *before* the Start Menu is generated,
so it has no effect. Does anyone know exactly what is going on here or
have any advice?

thanks,
Demian

 

[Guest]

Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

The built-in tools from MS are OK, but I've used the following tools to lock
this down:
http://www.sitekiosk.com/
http://www.emailarms.com/products/internet_kiosk.html

My thought on this is to go another route...

The easiest way to accomplish locking down a public terminal in a library is
using Terminal Server.

I don't know why libraries don't do this now because you can lock down the
ENTIRE environment for a remote user, IT'S CHEAPER to use a Win2k3 server and
CE terminals connected to the Terminal server, and you can lock access to the
Terminal Server at 443/TCP.

Here are some pointers:
http://support.microsoft.com/default.aspx?scid=kb;en-us;278295
http://techrepublic.com.com/5100-24_11-5239498.html

I've helped several hospitals pass HIPAA requirement by providing limited
remote access to Terminal Server over SSL with a restricted RDP environment
using these principles.


"Demian Katz" wrote:

> I work in a public library and am working on a Windows-based method of
> providing timed Internet sessions for the public as a replacement for
> some commercial software. Basically, I want to replace Internet
> Explorer with a VBscript I've written. Using networked profiles and
> Group Policy, I have been successful at getting the desktop pinned
> down, but I'm running into problems getting control of the Start Menu.
> Even though the Start Menu is empty on my networked profile and the
> "All Users" and "Default Users" Documents and Settings folders on the
> end-user PCs, Windows XP appears to automatically generate Start Menu
> links to Internet Explorer the first time I log into the computer after
> each reboot. I've tried using a logon script to delete the link, but
> it seems that the script executes *before* the Start Menu is generated,
> so it has no effect. Does anyone know exactly what is going on here or
> have any advice?
>
> thanks,
> Demian
>
>