Company Christmas Holidays
North American Headquarters in Miami, USA: Dec 25, 2015, Jan 1st 2016
European Headquarters in Muenster, Germany: Dec 21, 2015 until Jan 03rd 2016
Limited support is available during this period.
We at PROVISIO wish you Merry Christmas and a Happy New Year!

 

Support Request: Program not allowed under restricted user

Description

Hi - we are running a few machines with Windows 10 Pro and SiteKiosk, and on these machines we also have our own additional software to manage a series of lockers.

But for some reason our updated version of this locker control program is now excluded from the SiteKiosk restricted user, unless I make the SiteKiosk Unprotected during the installation, and this was not needed with the old version of our locker control program.

Is it possible to get some information what our locker control program must contain to be accepted under the restricted user, so I can inform our developers about what must be changed?

Answer: (1)

Re: Program not allowed under restricted user 2/26/2019 12:20 PM
Hello,

As your application works in "Auto Start" mode while the SiteKiosk user account is set to “Unprotected” you most likely have to adjust program access and/or directory access rights.
These can for example include read AND write access to the corresponding directories of your application.

You can use the System Security Wizard to adjust this and other rights for the SiteKiosk user (Customized-->Folder access):
http://www.provisio.com/helpconsole/SiteKiosk%20Help/en-US/default.htm?advanced.htm

Generally SiteKiosk has no direct influence to external applications but 2 settings that restrict the execution:

1. Windows & Dialogs Management:
SiteKiosk can block certain dialogs with using the Windows & Dialogs Management.
If you want / need to allow a specific Dialog that is blocked by default you can create a new entry with corresponding title at “-->Access/Security-->Block system critical windows & dialog boxes-->Settings” (or even delete the corresponding entry that blocks the window)

When SiteKiosk blocks a certain window you will find a notification in the SiteKiosk log (…\SiteKiosk\Logfiles).
Example:
[SiteKiosk] Notification: According to the windows monitoring rule(Title:'xxxxxx' Class:'xxxx') the window (Title:'xxxxxxxx' Class:'xxxxxxxxx') will be closed

Further information here:
http://www.provisio.com/helpconsole/SiteKiosk%20Help/en-US/default.htm?windows___dialoge.htm
http://www.provisio.com/helpconsole/SiteKiosk%20Help/en-US/default.htm?handling_of_windows.htm
https://www.provisio.com/en-GB/CustomerSupportCenter/ArticleDetails.aspx?ArticleID=5676

2. User access rights of the SiteKiosk user:
In “Auto Start” mode the SiteKiosk Browser will be started within the restricted local SiteKiosk user account.
This also applies to access rights to the folders (read only, read & execute, blocked….) and blocking certain EXE programs.

To change user rights for the SiteKiosk user you can use the System-Security-Manager (e.g. providing full access to the folder where the EXE you want to start is stored to).
Further information here:
http://www.provisio.com/helpconsole/SiteKiosk%20Help/en-US/default.htm?step_2_-_security_manager.htm
http://www.provisio.com/helpconsole/SiteKiosk%20Help/en-US/default.htm?advanced.htm
http://www.provisio.com/helpconsole/SiteKiosk%20Help/en-US/default.htm?access_rights1.htm


You may also check this troubleshooting guidelines for using external applications:
http://devblog.provisio.com/post/2015/05/15/Troubleshooting-Guidelines-for-Using-External-Applications-with-SiteKiosk.aspx

Regards,
Michael Olbrich