Janik von Rotz

2 min read

Project: Setup Windows 7 Kiosk

The goal of this project is a simple Windows 7 Kiosk installation with nothing else as the newest version of internet explorer installed. A user should not be allowed to do something than can malfunction the system or even elevating the user privileges. I want to show you in this post which GroupPolicies I’ve used and what configurations I made to set up this type of installation.

First I want to commit my principles for working with ActiveDirectory and Group Policies:


The logged in user can…

Windows 7 Kiosk - Setup


The setup of the windows workstation is very simple:

The Group Policy Management Console is equipped with newest Windows 7 AMDX templates.

Group Policies

The following section shows the policies I’ve used to restrict the access to the computer and it’s programs.

Windows 7

Desktop background

Add a desktop wallpaper.

Windows - Desktopbackground

Windows - Taskbar Result

Remove Desktop Icons

Remove the default desktop icons.

Windows - Remove Desktop Icons

Remove System Buttons

Remove the start system buttons and the options showed after click Ctrl + Alt + Delete.

Windows - Remove System Buttons

Restricted Start Menu

Remove  the all items in the windows start menu.

Windows - Restricted Start Menu

Windows - Start Menu Result

Restricted Taskbar

Denie any possiblity to customize the windows taskbar.

Windows - Restricted Taskbar

SharePoint Icon

Adds a simple icon to the desktop.

Windows - SharePoint Icon

Windows - Icon Result

Internet Explorer

Delete Cache

Delete the browser cache on exit.

Internet Explorer - Delete Cache

Disable Save Passwords

Internet explorer is not allowed to prompt for saving password information.

Internet Explorer - Disable Save Passwords

Hide Menus

Hide internet explorer menus.

Internet Explorer - Hide Menus

Internet Explorer - Result

Categories: Client management
Tags: activedirectory , desktop , kiosk , policy , windows
Improve this page
Show statistic for this page