Limiting access & content filter

June 15, 2010 by
Filed under: Security 

You will greatly reduce the risk of unauthorized access to your kiosks by running eCrisper from an account with reduced access.  You can also use the Mac’s Parental Controls feature to control the applications and content a kiosk user may use or view.

Managed account with parental control

  1. Install eCrisper first.
  2. Launch System Preferences.
  3. Click the Accounts icon to open the Accounts preferences pane.
  4. Click the lock icon (bottom left corner). You will be asked to provide the password for the administrator account you are currently using. Enter your password, and click the OK button. You may have to repeat this during the process.
  5. Click the plus (+) button located below the list of user accounts.
  6. The New Account sheet will appear.New Account Sheet
  7. Select Managed with Parental Controls from the New Account dropdown menu at the top of the sheet.
  8. Enter a name for this account in the Name and Nickname fields – for example kioskuser.
  9. Enter a password for this account in the Password field and descriptive hint if you wish.
  10. Click on the Create Account button. You should be back to the Accounts pane with your new account selected and Enable parental controls checked. Do not check Allow user to administer this computer. Click on Open Parental Controls.
  11. Select the user you want to modify, in this case kioskuser, if it is not already selected.
  12. Under System check Simple Finder and Only allow selected applications. Uncheck all Applications except eCrisper under Other.
  13. Unckeck ‚Can Administer printersCan burn CDs and DVDs, and Can Change Password.
  14. Select the Content tab. The Content section of Parental Controls lets you control which web sites the managed user may visit. It also lets you place a filter on the included Dictionary application, to prevent access to profanity. Web sites containing adult content will be restricted according to a proprietary method that Apple uses. You can click the Customize button to add specific web sites to allow or never allow lists.Restrict web content
  15. Go back (left arrow at the top) and click on Login Options (bottom of the account list). Set the new account as Automatic login and enter the password when required.Login Options
  16. That’s it. Next time you reboot it should use this new managed account. If you checked Launch automatically in the General pane of eCrisper settings, it should start as a kiosk.
  17. One more thing you might do: reduce the size of the taskbar to 0 in case it is displayed for a second or 2 when rebooting.


Comments are closed.