Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have been tasked with building several PCs to act as secure kiosks that allow users to view and use an intranet site at my company. Our LP staff will cover physical security, so that is not a concern. To prevent booting from a USB drive or walking with the HDD, I will be encrypting with BitLocker. What I am having trouble with is deciding on a method to lock down Windows 7 in such a way that the only thing a user has access to is a browser (in this case, IE9) and limit the browser to specific URLs (or domains). I have considered doing this through Group Policy, but it seems there would be a substantial amount of research, development, and testing involved to get it right. With that said, does anyone know of a free or inexpensive piece of software that can accomplish this? Any recommendations would be appreciated. Thank you.

share|improve this question
Windows 8.1 will have a "Kiosk Mode" or "Assigned Access" which will do exactly this. Consider it if the benefits (OS-level support) can outweigh the wait (It's supposed to be out in the last quarter of 2013 or so) for you. – Darth Android Jul 1 '13 at 14:31
Have you considered building your own Embedded Standard/Industry system? You can restrict access to features by just not installing them.… – Szymon Szydełko Jul 1 '13 at 14:54
Darth Android -- Windows 8 kiosk mode is compelling. Unfortunately I need to have these deployed sooner than that. Szymon Szydelko -- I had not considered that, but given the small # of systems I need to build and the short turnaround time, I don't think the time investment would be worth it. Interesting, though. – Chck Jul 1 '13 at 15:02
@Chck: Does the browser have to be IE? Otherwise I would recommend this. – Karan Jul 1 '13 at 15:16
@Chck - If thats the case then Windows 8 isn't even an option. Windows 7 has tons of kiosk applications thats exist you should go that route instead. If you want native support Windows 8.1 will be your ultimate solution once IE9 requirement isn't an issue. – Ramhound Jul 1 '13 at 15:52

Group Policy is how either you or a piece of software will need to get this done. Linked is 2 documents; Creating a Steady State by Using Microsoft Technologies and Group Policy Settings for Creating a Steady State showing/explaining how to configure per user or machine to lock down the options you desire.

share|improve this answer
I have downloaded both and am reviewing them. Thank you. – Chck Jul 1 '13 at 15:06

There are plenty of kiosk software available to do this, I have used and can recommend SiteKiosk although I can't say if it is better or worse than others.

Many of the different vendors offer Free Trials, so check a few out

There also is OpenKiosk, an Open Source alternative.

Another real good choice appears to Webconverger which claims to be a Browser Only Operating System. In practice it appears to be a micro-linux, and I am not sure what customization is available.

share|improve this answer
SiteKiosk looks good, but the price is a bit heavy. That's what I was really looking for with my question: Recommendations from people who have actually used the software. Thank you! – Chck Jul 1 '13 at 15:05

I googled lock down kiosk windows 7 and found these softwares. Seems legit and pretty solid.

Internet Kiosk Pro (

Advanced Internet Kiosk (

Secure Lockdown (

Sitekiosk (

Or as Dark mentioned in the comments, there is a built in Kiosk mode into WIndows 8.1. If you can put this project on hold until the official release, this may give you the functionality that you're wanting without having to purchase third-party software.

enter image description here

Of course, if you can move away from Windows for the kiosk, you can use an open source alternative.

share|improve this answer
I'm really looking for recommendations from people who have used the software. Thank you for your response, though. – Chck Jul 1 '13 at 15:06

Can't recommend WINSelect Enough. Worth the money easily.

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .