Windows Kiosk Setup Memento
This is my own checklist to set up a standalone Windows machine for installations that should run uninterrupted for long periods of time. This is still a work in progress!
Dedicated User Account
I usually create a dedicated user account for each project. This allows me to start with a blank slate and tweak the settings for each project individually.
- Create new user account with lusrmgr.msc.
- Check "Password never expires". If computer is in a secure location, just leave the password blank (use caution).
- Right-click user and go to "Member of" tab. Add it to admins group (if appropriate).
- Log into new user and say no to every goddamn prompt!
Language
If your project will travel to various parts of the world, it's probably safer to set the dedicated account to use English as its language. This will make it easier for a majority of people to help you troubleshoot the project if the need arises. You can do that in the Time & Language section of the settings.
Task Scheduler
You can use the task scheduler to start whatever appropriate program. This can be used to run a custom .bat file.
- Schedule whatever should be started at boot
- Leave a delay because Windows still does a bunch of stuff after it has officially started
Power
- Go to Power & Sleep settings and make sure the computer never sleeps (high performance)
System Sounds
It might be appropriate to disable system sounds. You can do that by going to the Sound control panel and selecting "No sound" as the Sound Scheme. You can also uncheck "Play Windows Startup Sound".
Notifications
Windows Updates
- Disable automatic updates with Group Policy
- Start > gpedit.msc
- Computer Configuration > Administrative Templates > Windows Components > Windows Update
- Double-click the Configure Automatic Updates policy on the right side.
- Check Disable to turn off the Policy
Windows Pro, Enterprise and Education
Windows Home
Disable Windows update through the registry
Remote Control
- Install remote control application such as UltraVNC (if you can reach the machine directly by IP)
- Configure access
- Install TeamViewer, LogMeIn or AnyDesk for access through firewalls
Startup Programs
- Open Task Manager > Startup Tab
- Disable all unneeded programs (Cortana, Windows Security Notification Icon, Java Update Scheduler, etc.)
Time Zone
- Set the right timezone for the location.
Windows Defender
- Disable it!
Auto-login
Daily reboot
This may or may not be appropriate. It may allow the installation to simply recover without having to intervene.
File Explorer
- Control Panel > File Explorer Options > View tab
- Check Always Show Menus
- Check Show hidden Files, Folders and Drives
- Check Hide Empty Drives
- Uncheck Hide extensions for known file types
USB Power Management
- Start > Device Manager > Universal Serial Bus Controllers
- Doubleclick on each USB Root Hub heading
- Click on Power Management Tab and uncheck “Allow the Computer to turn off this device to save power"