/windows-kiosk-memento

Instructions to setup a standalone Windows machine for kiosk or installation purposes

Apache License 2.0Apache-2.0

Windows Kiosk Setup Memento

This is my own checklist to set up a standalone Windows machine for installations that should run uninterrupted for long periods of time. This is still a work in progress!

Dedicated User Account

I usually create a dedicated user account for each project. This allows me to start with a blank slate and tweak the settings for each project individually.

  • Create new user account with lusrmgr.msc.
  • Check "Password never expires". If computer is in a secure location, just leave the password blank (use caution).
  • Right-click user and go to "Member of" tab. Add it to admins group (if appropriate).
  • Log into new user and say no to every goddamn prompt!

Language

If your project will travel to various parts of the world, it's probably safer to set the dedicated account to use English as its language. This will make it easier for a majority of people to help you troubleshoot the project if the need arises. You can do that in the Time & Language section of the settings.

Task Scheduler

You can use the task scheduler to start whatever appropriate program. This can be used to run a custom .bat file.

  • Schedule whatever should be started at boot
  • Leave a delay because Windows still does a bunch of stuff after it has officially started

Power

  • Go to Power & Sleep settings and make sure the computer never sleeps (high performance)

System Sounds

It might be appropriate to disable system sounds. You can do that by going to the Sound control panel and selecting "No sound" as the Sound Scheme. You can also uncheck "Play Windows Startup Sound".

sound2

Notifications

Windows Updates

  • Disable automatic updates with Group Policy
    • Start > gpedit.msc
    • Computer Configuration > Administrative Templates > Windows Components > Windows Update
  • Double-click the Configure Automatic Updates policy on the right side.
  • Check Disable to turn off the Policy

Windows Pro, Enterprise and Education

Windows Home

Disable Windows update through the registry

Remote Control

  • Install remote control application such as UltraVNC (if you can reach the machine directly by IP)
    • Configure access
  • Install TeamViewer, LogMeIn or AnyDesk for access through firewalls

Startup Programs

  • Open Task Manager > Startup Tab
  • Disable all unneeded programs (Cortana, Windows Security Notification Icon, Java Update Scheduler, etc.)

Time Zone

  • Set the right timezone for the location.

Windows Defender

  • Disable it!

Auto-login

Daily reboot

This may or may not be appropriate. It may allow the installation to simply recover without having to intervene.

File Explorer

  • Control Panel > File Explorer Options > View tab
    • Check Always Show Menus
    • Check Show hidden Files, Folders and Drives
    • Check Hide Empty Drives
    • Uncheck Hide extensions for known file types

USB Power Management

  • Start > Device Manager > Universal Serial Bus Controllers
  • Doubleclick on each USB Root Hub heading
  • Click on Power Management Tab and uncheck “Allow the Computer to turn off this device to save power"

More: