5. Optional Enhancements

• Use Group Policy to restrict access to system settings or drives.

Restrict users from:

• Accessing Control Panel and Settings
  
  
• Opening Drives (like C:)
  
  
• Running Task Manager, CMD, or Registry Editor
  
  
• Installing/uninstalling programs
  
  
• Seeing admin accounts or other users' files
  
  

Applies only to the Padilla Reading Room user. 

1. Accessing Control Panel and Settings

Open gpedit.msc, then go to each of the following paths:

User Configuration > Administrative Templates > Control Panel

Setting: Prohibit access to Control Panel and PC settings

Action: Enable

1. Opening Drives (like C:)

User Configuration > Administrative Templates > Windows Components > File Explorer

Setting: Prevent access to drives from My Computer

Enable, then choose:

Restrict C drive only

Or Restrict all drives

1. Remove “Run”, “Command Prompt”, etc.

User Configuration > Administrative Templates > Start Menu and Taskbar

Remove Run menu from Start Menu → Enable

Prevent access to the command prompt → Enable

Remove access to the Shut Down, Restart, Sleep → Enable (optional)

1. Disable Registry Editor

User Configuration > Administrative Templates > System

Prevent access to registry editing tools → Enable

1. Disable Task Manager

User Configuration > Administrative Templates > System > Ctrl+Alt+Del Options

Remove Task Manager → Enable

• TODO: Add wallpaper and desktop icons to Default profile to pre-seed new sessions.
• Auto-login into Padilla Reading Room account for kiosk-style use (optional)
• TODO: shorten login time
• remove privacy options on first login using custom xml