亭在Windows 8上运行常规软件（非Windows Store应用） [英] Kiosks in Windows 8 Running Regular Software (Non-Windows Store App)

问题描述

我公司经营使用公用电话亭。这些亭子运行Windows 8，虽然他们是安全的，他们肯定不如亭AKA自动取款机，你会在银行看到的安全。之所以运行Windows 8是采取微软最近推出了新的信息亭功能的优势。然而，似乎该操作系统只允许运行在这Kiosk模式如果正在运行或打算运行该软件可在Windows应用商店的应用程序。

所需的软件不能够在这一刻被投入到Windows应用商店，但我还是喜欢拿亭功能的优势。我如何使用信息亭的功能，而仍运行所需的应用程序？ MS官方术语为Kiosk模式被分配的访问。

我们会尽力给予至少允许用户访问锁定亭尽可能以及引导在启动软件。此外，我们了BitLock只要有可能。然而，仍然有引导软件和有人真的确定了网上冲浪也很可能这样做的延迟。

据我所知，微软已设定的分配的访问规则在Windows应用商店的应用程序，但我仍然在寻找任何可能的解决方法。即使方式，使一个Windows商店应用真的很快，这是仅适用于我的使用。第三方软件是值得欢迎的。但是，任何建议，可以帮助我们的情况表示赞赏。

当然，玩弄在Active Directory中，GPEdit，和注册表将获得接近我想要实现。其中一个我面临的主要问题是，在Windows桌面和放大器; Metronic的用户界面将应用程序加载之前加载，而在Kiosk模式：看到这里 - 启动时间更快

用户在使用此次发布的时间的时间来检查和放大器;时间使用的攻击。因此，即使以极大的定制，我留下了它永远不会被视为有效的MS可以使它的问题。最后，我想留给MS获得最佳效果。

很多人都在寻找这个答案，我敢肯定，任何帮助表示赞赏。

---

TLDR：如何使用Windows 8.1亭的功能，而无需在Windows Store应用，但确实有软件？

解决方案

如果您有Windows 8专业版或企业版，可以实现与组策略（GP）。

1. 创建具有所需权限的用户;


2. 作为一个管理员帐户，运行Microsoft管理控制台（程序mmc.exe）;


3. 转到文件>添加/删除管理单元...


4. 选择组策略对象，然后按添加


5. 按浏览按钮


6. 在用户选项卡，选择刚刚创建的用户


7. 按完成


8. 转到用户配置 - >管理模板>系统和编辑自定义用户界面设置


9. 将其更改为Enabled（启用），并输入您的应用程序路径（即C：\Program Files\My亭App\App.exe）在接口文件名称字段

下一页您登录使用该用户时，Windows将不会加载Explorer.exe的，但你的应用程序来代替。这样，你就不会很容易接触到桌面。通过GP你可以调整你的系统，以防止其他东西一样阻止特定的应用程序，删除功能等。

您也可以通过注册表强制自动登录。进一步的信息可以在这里找到： http://deployhappiness.com/group-policy-kiosk-mode-锁定向下/

我希望帮助。

My company operates using public kiosks. These kiosks are running Windows 8 and though they are secure, they are certainly not as secure as the kiosks AKA ATMS you would see at a bank. The reason for running Windows 8 is to take advantage of the new Kiosk feature that Microsoft recently introduced. However, it seems that the OS only allows operation in this KIOSK mode if the software that is being run or intended to be run is available on the Windows Store as an application.

The software required is not able to be put out to the Windows Store at this moment, but I'd still like to take advantage of the Kiosk feature. How can I use the kiosk feature and still run the desired application? The official MS term for the Kiosk mode is Assigned Access.

We do try to lock down the kiosks as much as possible by giving least permission user access as well as booting the software on startup. In addition, we BitLock whenever possible. However, there is still a delay in booting the software and someone really determined the surf the web could very potentially do so.

I am aware that Microsoft had set the Assigned Access rule for a Windows Store app, but I am still looking for any potential workarounds. Even ways to make a Windows Store app really quickly, that is only available for my usage. Third party software is welcome. But any suggestions that can help our case is appreciated.

Surely playing around in Active Directory, GPEdit, and Registry will get closer to what I want to achieve. One of the main problems I am facing is that the Windows Desktop & Metronic UI will load before the application loads, whereas in Kiosk mode: see here - boot time is quicker.

Users use this launch time for time to check & time to use attacks. So even with great customization, I'm left with the problem that it will never be as efficient as MS could make it. In the end, I'd leave that to MS for optimal results.

Many people are searching for this answer, I'm sure, and any help is appreciated.

---

TLDR: How do you use the Windows 8.1 Kiosk feature without having a Windows Store App, but do have software?

解决方案

If you have Windows 8 Pro or Enterprise, you can achieve that with Group Policies (GP).

1. Create a user with the desired privileges;
2. As an admin account, run the Microsoft Management Console (mmc.exe);
3. Go to File > Add/Remove Snap In...
4. Select the Group Policy Object and press Add
5. Press the Browse... button
6. In the Users tab, select the user you just created
7. Press finish
8. Go to User Configuration > Administrative Templates > System and edit the Custom User Interface settings
9. Change it to Enabled and enter your application path (i.e "C:\Program Files\My Kiosk App\App.exe") in the Interface File Name field

Next time you log in using this user, Windows won't load Explorer.exe, but your application instead. This way you won't have easy access to the desktop. Through GP you can tweak your system to prevent other stuff like blocking specific applications, removing features, etc.

You can also force an auto logon through registry. Further information can be found here: http://deployhappiness.com/group-policy-kiosk-mode-locking-down/

I hope that helps.

这篇关于亭在Windows 8上运行常规软件（非Windows Store应用）的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！