On Wed, 2003-11-26 at 17:21, Ogre wrote: > Hi, > It sounds like you are using some version of Windows... There are a plethora of > registry keys that you can use to lock down the desktop, internet settings, and even > the specific applications you do not wish the users to use. You can do this on a > per-user basis, therefore you could use one account as an administrative account, > with full rights, and another account for the "player" accounts, with only rights to > use what you wish them to. I suggest you peruse www.microsoft.com. One good place > to start in the registry is: > HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer > > -Ogre
Unfortunately Windows is full of holes and bugs... I have yet to see Windows Kiosks even at this school which are fully locked down. There always seems to be a way to skirt around restrictions by using bugs in the applications you are trying to lock users into. Windows does have quite a few lock-down features for explorer (that includes *some* file dialog windows), IE, etc... but there are ways around them. If you can visit a website, you can exploit any recent security holes in IE to execute commands, download and run files, etc... and IE is built into windows and Steam uses embedded IE. There are about a dozen unpatched remote file execution holes (well about a dozen ways to use 5 or 6 of them) that are currently unpatched, by this I mean a website can force you to download an executable and execute it... most of them rely on scripting, but not all. I'm just trying to give you some examples of things to watch out for when using new products that try to lock-down windows, as new programs often miss many things...and some things they cannot protect (i.e. windows holes). That said...ummm... good luck ;-) -sb _______________________________________________ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlcoders
