Kiosk for JPO

create a user JPO

Use the deepfreeze action - #create user JPO# the following script creates an user JPO and enables autologon for the user.

<?xml version="1.0" encoding="UTF-8"?>
<!--Deep Freeze Exported Custom Action file-->
<CUSTOMDEFINEDACTIONS>
  <ACTION2>
		<CAPTION>
			<FRENCH>create user JPO</FRENCH>
			<ENGLISH>create user JPO</ENGLISH>
		</CAPTION>
		<FILEMENU>Y</FILEMENU>
		<POPUPMENU>Y</POPUPMENU>
		<SUBITEMS/>
		<PARAMS/>
		<SYNC/>
		<LOG/>
		<EXECUTE>psexec \\%%WKSNAME%% cmd /k net user jpo jpo /add /passwordchg:no &amp;&amp; reg add "HKLM\SOFTWARE\Microsoft\Windows NT\Currentversion\Winlogon" /v "AutoAdminLogon" /t REG_SZ /d "1" /f &amp;&amp; reg add "HKLM\SOFTWARE\Microsoft\Windows NT\Currentversion\Winlogon" /v "DefaultUserName" /t REG_SZ /d "jpo" /f &amp;&amp; REG ADD "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" /v DefaultPassword /t REG_SZ /d "jpo" /f </EXECUTE>
		<WORKDIR>C:\windows\system32</WORKDIR>
	</ACTION2>
</CUSTOMDEFINEDACTIONS>

Automation of creating assigned access is done using sikulix

copy the enable-kiosk from \\networkshare\kiosk\kiosk29012024\enable-kiosk to local c:\temp directory using Insight tech console.

launch the following command to create the assigned access for microsoft edge via open url : url of JPO

java -jar c:\temp\enable-kiosk\sikulixide-2.0.5.jar -r c:\temp\enable-kiosk\kiosk.py

To disable the JPO

Use the deepfreeze action - #Delete user JPO#

<?xml version="1.0" encoding="UTF-8"?>
<!--Deep Freeze Exported Custom Action file-->
<CUSTOMDEFINEDACTIONS>
  <ACTION3>
		<CAPTION>
			<ENGLISH>Delete User JPO</ENGLISH>
			<FRENCH>Delete User JPO</FRENCH>
		</CAPTION>
		<FILEMENU>Y</FILEMENU>
		<POPUPMENU>Y</POPUPMENU>
		<SILENT>Y</SILENT>
		<SUBITEMS/>
		<SYNC/>
		<LOG/>
		<PARAMS/>
		<EXECUTE>psexec \\%%WKSNAME%% cmd /k net user jpo /delete &amp; REG DELETE "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" /v DefaultUserName /f &amp; REG DELETE "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" /v DefaultPassword /f &amp; REG ADD "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" /v AutoAdminLogon /t REG_SZ /d 0 /f</EXECUTE>
		<WORKDIR>C:\WINDOWS</WORKDIR>
	</ACTION3>
</CUSTOMDEFINEDACTIONS>

Executing this action deletes the user JPO. When the user is deleted, windows automatically clears the assigned access.

There is no need to execute disable-kiosk below, the script is there just for showing how to disable assigned access.

copy the disable-kiosk from \\networkshare\kiosk\kiosk29012024\disable-kiosk to local c:\temp directory using Insight tech console.

java -jar c:\temp\disable-kiosk\sikulixide-2.0.5.jar -r c:\temp\disable-kiosk\disable-kiosk.py