24PinKiosk

What are the Kiosks?

The kiosks allow 24PinTech customers to submit a work order form via Google Docs on campus in either the library or the front office.

The kiosks allow customers to put in work orders from various locations on campus, rather than having to find a computer on their own. Currently, we have two kiosks. The first kiosk is located in the library, and the second kiosk is in the office.

How to Replicate

The kiosks are now very easy to set up. There has been a complete image made when creating the first kiosk, so it's almost as simple as image a computer and drop it in. Use the image called "24PinKiosk". Simply, just plug in the power to the computer, the light, and the display. Connect the display's VGA cable, and the USB that controls the keyboard and mouse. That's it. Turn on the computer and connect it to the Internet (via Ethernet), and double check that it works. Pull out any unused cables and cable manage the kiosk, and you are done.

Lockdown

The kiosk was locked down via several methods to ensure that it is secure and so no one can access it. The first thing done was a program installed called OpenKiosk, which is a Mozilla Firefox based web browser that has various options for locking the browser. With it, it was locked to only allow the Google Forms page and the 24Pin.tech website. In addition, the only way to exit OpenKiosk is to plug a keyboard into the computer (which requires a key to the back), and to use the key combination "Shift+F1". This will allow you to input a password, which is "Low-level ATX password" (case-sensitive, no quotes). This grants you access outside of OpenKiosk and to its settings. OpenKiosk was placed in the Startup folder in the Start Menu in order to ensure that it opens

In addition to using OpenKiosk to lock everything down, there were registry edits to make sure OpenKiosk could not be escaped at all.

The first of the registry edits was to get rid of all of the options on the Control-Alt-Delete screen in Windows 7. The registry edits are in the following key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System

After navigating to this key, find the values DisableLockWorkstation, HideFastUserSwitching, NoLogoff, DisableChangePassword, and DisableTaskMgr and set the value data to 1. If any of the values do not exist, they can be created within the key. This disables all options on the Control-Alt-Delete menu.

The final edits made were deleting some programs that Windows uses for some of the functions, such as accessibility options. To delete those, you must navigate to the following folder:

C:\Windows\System32

After navigating to this folder, delete Magnify.exe, Narrator.exe, and Osk.exe. Those remove all Ease of Access/Accessibility options, and those also do nothing in the Control-Alt-Delete menu or via keyboard shortcuts.

Updating Restrictions

Restart the computer and log into the admin account