KB article ID: 5010 (permalink) Securing PCs and networks is a complex and continually evolving field. There are specialists who focus solely on such issues. The following advice is not guaranteed to be complete, current or accurate at all times. Instead, it is intended as a checklist you can use to ensure that local IT staff have addressed the major issues as they secure your systems. With regard to public access PC securityWindows 8.1 and 10 make it easy. They offer a “Kiosk Mode” feature. For how-to instructions, see https://www.howtogeek.com/173562/how-to-easily-put-a-windows-pc-into-kiosk-mode-with-assigned-access/ Windows 7 also offers this, but its version has known vulnerabilities. We recommend Window 7 PCs be setup using LGPOs, Local Group Policy Objects, instead. While we know of no comprehensive guide detailing ALL of the modifications that should be made to properly secure a Windows 7 Public Access terminal, some semi-complete guides can be found on Microsoft's site. These require a fair amount of reading and clicking to find everything. Check with your IT. For Microsoft's main page on this, see https://technet.microsoft.com/library/gg176676.aspx.
Physical security Regardless of the OS used, there are issues beyond securing/restricting a PC’s software --physical security is just as important, if not moreso. See https://www.giac.org/paper/gsec/4304/securing-public-access-computers-library-setting/107011.
With regard to the software & services offered on a public PCThe programs and web-access you allow will depend on the services you want to offer:
Your iSeries system should already be setup with a security-settings-appropriate PC JIMS Courts public access user ID. Given access to PC JIMS Courts on a public access PC, users can securely look up authorized case information. It is recommended that you DO NOT provide public users the PC JIMS public access user ID password. Instead, sign in that user ID for them. Given an established PC JIMS Courts public access user ID, it's easy to setup a PC JIMS Imaging View-Only public access user ID: Once your PC JIMS Imaging public access user ID is created, use it to sign in public users. It is recommended that you DO NOT provide public users the PC JIMS public access user ID password. |