help with user mgmt for public computer

[cgott42]

I manage a public computer in a local center (I posted previously and have the computer physically secured so that no one can plug in any USB or other driver to harm the computer. Likewise there is no internet access, and networks have been disabled)
So basically nothing from the outside can get onto the computer.

The computer has been a big hit, and many are getting much use from it. However, as always, there's a few "bad apples", so eventhough they can't get stuff on the computer - they did manage to (a) litter the main screen with shortcuts (b) delete files (c) change the status of a program to "only administrators can use"

Can someone help me so that this user account (the public log in)
(a) cannot shut off the PC
(b) cannot delete anything
(c) cannot create any shortcuts on the desktop
(d) basically they should only be allowed to run the 2 programs that are on the computer for them to run.

Any ideas, or references to 3rd party software to help

The computer is running Win7 Premium
thx

 

[Modelworks]

There are two options
Windows steadystate - free but MS is removing it after Dec 30,2010.
MS instead is recommending win7 users use the built in features.
http://windowsteamblog.com/windows/b/springboard/archive/2010/09/27/steady-state-for-windows-7.aspx


Deepfreeze - $45
http://www.faronics.com/en/default.aspx
Either will do what you need.

 

[mechBgon]

You could also do the upgrade to Win7 Pro, and then lock stuff down to your heart's content using Local Group Policy. If you want to allow just two specific apps to be run... yeah, you can do that. No icons, no shutdown option? You can do that too. No permission to run any unauthorized executables? Yeah, use Software Restriction Policy (note that you'll break the current version of Flash Player if you apply SRP to .DLL files).

 

[cgott42]

There are two options
Windows steadystate - free but MS is removing it after Dec 30,2010.
MS instead is recommending win7 users use the built in features.
http://windowsteamblog.com/windows/b/springboard/archive/2010/09/27/steady-state-for-windows-7.aspx


Deepfreeze - $45
http://www.faronics.com/en/default.aspx
Either will do what you need.

Thanks for you help again, I went with the deepfreeze and am very happy with it.
I'm thinking about doing the same for my home PC (leaving a data drive for files, but protecting everything else, or perhaps storing data files on a "cloud drive")
I see that my PC has Win 7 Pro - so perhaps I can save the $45 (but that would require some time to read through the instructions on how to do it)
also I already own True Image 2011 with plus pack and they have a "Try and decide" feature - does anyone know if that can do the same thing as the deepfreeze?