Custom Settings - System Security Manager
What is the System Security Manager for?
A user account named "SiteKiosk" was created automatically during the installation of SiteKiosk. Since the complex configuration of the access rights is extremely difficult even for a professional, the Security Manager under Windows 7, 8, 10 will take on this task. This tool makes adjusting individual access rights a breeze. Keep in mind that custom modifications will rarely be necessary as the quick start menu options will suffice in most cases.
What are user accounts anyway?
Windows 7, 8, 10 allows you to create multiple user accounts (START/CONTROL PANEL/USER ACCOUNTS). You can assign different access rights to these user accounts. This will make it possible for you to, for example, create a guest account on your system in addition to your own user account, which will usually have administrator rights with full access to the system. You can then, for instance, allow a friend to use this guest account if you do not want her to have full access to your computer and your private information.
If you created more than one user account, all of these accounts will be displayed on the so-called login screen after your system has booted up. The user can then log on entering the password assigned to her and will only have access to the features and files that have been approved for this user account. SiteKiosk will create a user account named SiteKiosk during the installation process. This account is, by default, a user account with limited access rights. This account can be restricted even further using the Security Manager, which is also done automatically during installation. You will not have to adjust the default settings for the SiteKiosk user by means of the System Security Manager's custom settings unless it is necessary, for instance, for running certain applications.
In most cases, you will find the Security Manager's default settings sufficient for your purposes. Therefore, simply select the Safe option in the quick start menu and click on OK.
You may find this additional information help, in particular when using custom settings:
1.1 Only Administrators are allowed to alter configurations
If you want to modify settings in SiteKiosk's configuration or in the Security System Manager, you will have to be logged on as a Windows user with administrative rights. Thus, log out of your SiteKiosk user account and log back on as an administrator if you want to alter the settings. You can also launch the SiteKiosk configuration directly from the Exit menu of SiteKiosk under a restricted user account. You will then be prompted to enter your administrator password when you launch the configuration tool.
1.2 Logging out of your SiteKiosk user account
To log out, you can click on the logout options in SiteKiosk’s Exit dialog box.
Provided you are on the desktop belonging to the limited SiteKiosk user, SiteKiosk is not open, and you have not turned on the "Hide auto logout" option under Policies, you can also log out using the Start->Log out. Windows 7, 8, 10 also allows you to press CTRL-ALT-DEL to open the login dialog box provided SiteKiosk is not open.
1.3 Cancelling the auto login process
If you run SiteKiosk using the recommended auto start option, the SiteKiosk user will be signed in automatically when the computer boots up. You can cancel the auto login process by holding down the SHIFT key. However, you may have to keyboard lock first if you locked the keyboard previously. Please note that the window left to complete this process on modern computers is exceptionally brief and may not be long enough.
Should you experience problems while launching SiteKiosk and be unable to interrupt auto login, please follow these instructions to regain access to your system.
Only an NTFS-formatted hard drive allows you to assign specific user rights to every file. If one of your hard drives use the FAT format, the Security Manager will show a warning upon start-up. FAT-formatted hard drives represent a security risk.
As shown in the example below, you can use the command line to convert FAT-formatted hard drives
to the NTFS file format WITHOUT running the danger of losing any data stored on your hard drive:
CONVERT C: /FS:NTFS
You will need this option when installing applications that are set up once for a user. For instance, if you want to use Word under the restricted user, Word must be launched once under the unrestricted SiteKiosk user to allow the application to subsequently run without displaying any prompts.Consequently, if you have already assigned limited rights to the SiteKiosk account, you can use this option to revert this process and subsequently log in with your SiteKiosk user to make the desired changes. When you are finished, remember to reset the user rights to provide the user with additional protection.