"WINSelect
has completely taken away the day-to-day problems. Partnered with Deep
Freeze, it relieves my tech department from having to touch the
machines for anything other than hardware issues. We spend little if no
time on the machines that we have this installed on."
- Tim Klan - Technology
Supervisor, Garden City Schools
Faronics WINSelect makes it
easy to manage the functionality of
computers in public access, kiosk, library, educational, and corporate
environments. By empowering IT administrators with full control over
computer system settings, WINSelect can customize a
computer’s
capabilities by restricting user access to certain applications,
websites, program functions, and system settings. IT administrators can
now dynamically configure systems without the hassle and complexity of
Group Policies. WINSelect has the power to lockdown computers by
limiting the features of third-party programs, regulating user
activity, and removing functions from within the Windows operating
system and installed applications.
For
many schools, universities, and libraries there is a serious
need to deploy computers that offers a limited feature
set—such as a
computer lab designed for young children, an information kiosk in a
library, or an administrative machine that needs to be simplified.
Limiting a computer’s functions is an important part of
protecting a
computer’s purpose. Having fully-functional computers placed
in
environments where only limited-functionality is required carries the
possibility of computers being used by students in a distractive or
inappropriate way.
Unfortunately,
until now the only way to limit a computer’s features
has been through complex and time-consuming Group Policies. Since not
all educational institutions have a Group Policy
‘expert’ available,
computers are often deployed in a fully-featured state.
Protect
A Computer’s Purpose
WINSelect
ensures that computers are being used by students for
their determined purpose by enabling administrators to easily tailor
the operating system and application functionality to include only the
required features. Using WINSelect makes it possible to create
limited-access or ‘simple’ machines that are
perfectly suited for
classrooms with young children, kiosks in libraries, or administrative
machines for staff. Users benefit from a simplified interface, and IT
personnel are ensured that computers are free from application and web
browsing activities that distract from a system’s role.
Influence
Student Activities
WINSelect
brings a level of enforcement that often does not exist in
unmonitored environments—such as the ability to restrict
student access
to applications, websites, system settings, and application
functionality. Popular applications such as Microsoft Office, Internet
Explorer, and Mozilla Firefox can all be customized to influence
student interaction. IT administrators can even limit session lengths
to ensure a ‘no loitering’ policy on computers, and
restrict student
access to storage devices and printers.
Menu Node
The Menu node provides the option to restrict
specific drop-down menu items from defined applications.
For
many corporations there exists a business requirement to deploy
a computer that offers a limited feature set—such as an
administrative
machine that needs to be simplified, an information kiosk that has a
dedicated role, or a production line computer that has a
mission-critical function. Limiting a computer’s functions is
an
important part of protecting a computer’s purpose. Having
fully-functional computers placed in environments where only
limited-functionality is required serves not only as a distraction to
user productivity but also a threat to business operations. For
example, users should not be able to browse the Internet or access
system settings on computers that are critical to business
operations—such as kiosks, point-of-sale machines, and
production line
systems.
Unfortunately,
until now the only way to limit a computer’s features
has been through complex and time-consuming Group Policies. Since not
all organizations have a Group Policy ‘expert’
available, computers are
often deployed in a fully-featured state.
Protect
A Computer’s Purpose
WINSelect
ensures that computers are used for their determined
purpose by enabling IT administrators to easily tailor the operating
system and application functionality to only include the features
required. Using WINSelect makes it possible to create limited-access or
‘simple’ machines that are perfectly suited for
kiosk environments or
administrative machines. Users benefit from a simplified interface, and
IT personnel are ensured that computers are not becoming cluttered up
with files or browsing activities that distract from a
system’s role.
Influence
User Activities
WINSelect
brings a level of enforcement that often does not exist in
unmonitored environments—such as the ability to restrict user
access to
applications, websites, system settings, and application functionality.
Popular applications such as Microsoft Office, Internet Explorer, and
Mozilla Firefox can all be customized to influence user interaction. IT
administrators can even limit session lengths to ensure a ‘no
loitering’ policy on computers, and restrict user access to
storage
devices and printers.
Kiosk Options
- Automatically
launch predetermined applications upon startup - Block
access to specific menu items and hot-key combinations - Restrict
access to any application on the workstation Microsoft
Office Application Functionality
- Prevent
the use of Visual Basic for Applications and prevent access to VBA
through Microsoft Office - Prevent
macro shortcuts within Microsoft Office programs - Disable
tools/add-in menu items to prevent users from enabling/disabling
Microsoft Office add-in programs - Disable
the Web toolbar within Microsoft Office - Disable
the Detect and Repair option from the Help menu Session Timer Settings
- Create
time-limited user session - Decide
whether users have the option to extend session limits - Create
multiple time segments that reference codes for users to input Regulate
Start Button Functionality
- Hide
the Start Button - Disable
Start Button right-click functionality - Customize
which options are available via the Start Menu - Force
the Classic style Start Menu to remove the Control Panel, Printer, and
Network Settings from the menu option Control
Panel and Desktop Restrictions
- Restrict
access to user accounts - Hide
any desktop icon - Prevent
right-clicks on desktop icons Windows
Explorer Restrictions
- Prevent
drag and drop functionality - Prevent
delete, rename, and folder creation - Restrict
access to UNC path Internet
Explorer Restrictions
- Control
which features and options are available within Microsoft Internet
Explorer 6 & 7 and Mozilla Firefox 1.5 and 2 - Prevent
right-clicks within the browser - Prevent
users from changing the default homepage - Prevent
Microsoft Office from being launched via the execution of Office
application files - Provide
all KIOSK mode options - Create
a list of allowed or restricted web sites by domain name, IP address,
or range of IP addresses and domain names - Prevent
users from using the address bar to access files Open,
Save, and Print Options
- Control
read access with the option to block saving data to the Hard Drive,
Floppy Drive, CD, DVD and USB devices - Control
or block network and web-based data storage - Restrict
the opening and saving of files with specific file extensions - Restrict
user access to specific printers - Restrict
the number of pages a user can print Active
Directory Template Integration
- Import
ADM templates for Active Directory to control any Microsoft product - Import
Microsoft Vista GPO’s to control workstation functions WINSelect
Templates
- Export
all configurations into a secure file - Use
template files to easily deploy standard settings to multiple
workstations
For
libraries it is essential that some of the computers deployed
only offer a limited feature set—such as catalogue computers
used to
find books and media, and administrative computers uses to check books
in and out. Limiting a computer’s functions is an important
part of
protecting a computer’s purpose. Having fully-functional
computers
placed in environments where only limited-functionality is required
carries the possibility of computers being used by
users—whether they
are patrons or staff—in a distractive or inappropriate way.
Unfortunately, until now the only way to limit a computer’s
features
has been through complex and time-consuming Group Policies. Since most
libraries do not have a Group Policy ‘expert’
available, computers are
often deployed in a fully-featured state.
Protect
A Computer’s Purpose
WINSelect
ensures that computers are being used by patrons and staff
for their determined purpose by enabling administrators to easily
tailor the operating system and application functionality to include
only the required features. Using WINSelect makes it possible to create
limited-access or ‘simple’ machines that are
perfectly suited for
library environments by only allowing users to access the features,
applications, and websites that are required. Users benefit from a
simplified interface, librarians don’t need to worry about
monitoring a
patron’s computer use, and IT personnel are ensured that
computers are
free from application and web browsing activities that distract from a
system’s role.
Influence
Student Activities
WINSelect
brings a level of enforcement that often does not exist in
unmonitored environments—such as the ability to restrict user
access to
applications, websites, system settings, and application functionality.
Popular applications such as Microsoft Office, Internet Explorer, and
Mozilla Firefox can all be customized to influence a library
patron’s
or staff member’s application and browsing habits. IT
administrators
can even limit session lengths to ensure a ‘no
loitering’ policy on
computers, and restrict user access to storage devices and printers.
Kiosk Settings
The Kiosk
node provides various setup options for a flexible Kiosk workstation
environment. Permanently maximize applications or freeze the
application window in a specified location.
The Administrative Console allows easy navigation to all WINSelect
features via nodes on the left side.
The
Network Restrictions node restricts access to specific web sites either
by Domain Name or IP address.
User Session
Specify timed user session
Forced
logout
Option to
login again
System Restrictions
Drives and File Extensions:
Restrict access to drivesand specified file extensions
Disable access to removabledrives
Additional Policy Restrictions:
Windows Explorer
Control Panel
Desktop & Windows Taskbar
Start Menu