guacamole-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Sebastien Bilodeau <>
Subject Re: Guacamole in fullscreen Kiosk mode?
Date Thu, 26 Jul 2018 13:35:44 GMT
 We've done it, and I can confirm it's a lot of work!

I'll share a few tricks:
1- In order to lock down your server, without locking out the
administrator, you want to do this:
- Create 2 administrator accounts, and 1 user account
- For Admin2, create a shortcut on the desktop, to manage GPOs
- For Admin1, keep it out of GPOs by setting Deny Read & Execute on

This has 2 results: Admin1 is unaffected by the restrictions applied
through GPOs, and Admin1 cannot manage GPOs anymore. Hence the Admin2 user
created beforehand.

2- Turn off and disable as much as you can, in GPOs. No Help, no
accessibility features, no control panel, etc.

3- Set your logon script to run two things. First the application you want.
For us, it's IE in kiosk mode. Then, we have the script run AutoHotKey and
remap about 500 shortcuts to "nothing", in order to disable them.

Good luck!

On Thu, Jul 26, 2018 at 8:40 AM, Martin Ciglan <> wrote:

> Has anybody tried to use Guacamole in fullscreen kiosk mode?
> So, user wouldn't see that is running in browser and there would be no
> issues with keyboard shortcuts, in other words, there must be some work
> done
> in order to achieve this right?
> --
> Sent from: http://apache-guacamole-general-user-mailing-list.
> --
> S├ębastien
> <>

View raw message