Have to build a computer for a store display.....

[MysticLlama]

So here's the question. How do I set it up so that you can't go off of a single domain?

What I would like to do is set up the browser to run full-screen and limited to a single domain. For instance, you could go to www.foo.com, or hostnamehere.foo.com, or www.foo.com/bar/default.htm, etc, etc..

I'm planning on making a user account (2000 box) so that they can't change anything important, but I'd really like to do the site limiting as well.

 

[BadThad]

You would have to code the web page for it. Basically, there is some controls you add to remove the toolbar and menus from IE.

 

[skace]

Mirror this foo.com site and make the web session work offline on the mirror - then just remove any network access completely from this PC. that way it has the whole website but no actual way to get anywhere else.

 

[MysticLlama]

The mirroring idea is good, except that it has to actually be online, because it's going to process signups, and possibly have ordering available from it.

Essentially the goal is to allow people to put in a bunch of info to join the preferred customers club, so we want to grab that info and send it to the web database, and then pop up a page they can print out to give to the person actually working at the store to get their card, and then it gets entered into the other database. (and don't ask why they can't just share info, long story)

We also want them to be able to check the site out though, and possibly buy something not available in the store at that moment.

 

[Garion]

There are ways to lock down IE to use only one site - It should be no problem. The other trick would be not to put in a DNS entry, simply add HOST file entries to the machine for the webservers they need to get to. Last thing you could would not be to put in a default gateway and add manual routes to the routing table for the IP's you want to talk to.

A more interesting trick will be to restrict the OS so all they can run is IE and can't hack into your company's network.

- G

 

[CTho9305]

I think the easiest way is to disable dns, and just put the one domain in the hosts file... of course, any one of us here could get around that. How secure you make it depends on the target users.

 

[tasslex]

You might also want to run IE in "Kiosk Mode", it disables certain features in IE and hides items such as the address bar, etc. I believe it is started by running "iexplore /k", but if you do a search at the Knowledge Base you should get some informative hits.