Locking Down a WinXP Pro Kiosk

[Kevin]

Hello,

I am trying to lock down a Windows XP Professional workstation. It is
a public computer that has only purpose: to browse a website for
ordering software CDs (I work for a university with campus wide
licenses for software). This same site is accesible from the web.

My idea of how to do this. Lock down the computer using Active
Directory and Group Policy objects. But I want to disable the Start
Menu or Explorer.exe all together. I also need to restrict the user
from browsing the computer ( Is using NTFS privs the best way? ) and I
want to stop the user from browsing off of the website ( Right now I'm
using IP Filtering to keep the user from accessing outside the campus'
subnet ). The only program I want to run is Internet Explorer and I
want a given user to login by default on boot up.

1. Disable Start Menu ( i.e. Click the start button and nothing
happens ) or disable Explorer all together? (And how-to)
2. How-to Restrict the user from browsing computer in Internet
Explorer
3. How-to Restrict the user from browsing off of the website in
Internet Explorer (Using trusted sites?)
4. How-to have a user login automaticlly?

[Manda Luyong]

Go to the site below. They have a lot of tips in creating registry entries
(both user level and machine level).
http://www.winguides.com/registry/

"Kevin" > wrote in message
om...
> Hello,
>
> I am trying to lock down a Windows XP Professional workstation. It is
> a public computer that has only purpose: to browse a website for
> ordering software CDs (I work for a university with campus wide
> licenses for software). This same site is accesible from the web.
>
> My idea of how to do this. Lock down the computer using Active
> Directory and Group Policy objects. But I want to disable the Start
> Menu or Explorer.exe all together. I also need to restrict the user
> from browsing the computer ( Is using NTFS privs the best way? ) and I
> want to stop the user from browsing off of the website ( Right now I'm
> using IP Filtering to keep the user from accessing outside the campus'
> subnet ). The only program I want to run is Internet Explorer and I
> want a given user to login by default on boot up.
>
> 1. Disable Start Menu ( i.e. Click the start button and nothing
> happens ) or disable Explorer all together? (And how-to)
> 2. How-to Restrict the user from browsing computer in Internet
> Explorer
> 3. How-to Restrict the user from browsing off of the website in
> Internet Explorer (Using trusted sites?)
> 4. How-to have a user login automaticlly?