We have a touchscreen kiosk with Windows 7 x64 running a single fullscreen AIR application. Kiosk has no mouse/keyboard. Normally user has read-only access and will have no ability to close app and modify something but who knows.
Now the setup is the following:
- windows logs in automatically with a dedicated user without admin priviliges
- our app is added to autorun section of Start->Programs for that user
- all multitouch and hold (right click) events are disabled
How can I do a more secure setup, i.e. replace default shell/restrict file system access, so that user will not break anything for sure? We also have to perform rare software updates so the setup should have an ability to give full admin access on demand.