Windows 8.1 and 10 make it easy. They offer a “Kiosk Mode” feature.
For how-to instructions, see https://www.howtogeek.com/173562/how-to-easily-put-a-windows-pc-into-kiosk-mode-with-assigned-access/
Windows 7 also offers this, but its version has known vulnerabilities. We recommend Window 7 PCs be setup using LGPOs, Local Group Policy Objects, instead.
While we know of no comprehensive guide detailing ALL of the modifications that should be made to properly secure a Windows 7 Public Access Terminal, some semi-complete guides can be found on Microsoft's site. These require a fair amount of reading and clicking to find everything. Check with your IT. For Microsoft's main page on this, see https://technet.microsoft.com/library/gg176676.aspx.
There are multiple links out from their main page, and all should be checked for pertinent info:
(Using LGPOs is fairly time-consuming; there are many things that will need to be set/changed. Any semi-competent IT admin should be quite capable of doing this. That said, a wrong setting could lock you out of the system completely.)
Regardless of the OS used, there are issues beyond securing/restricting a PC’s software --physical security is just as important, if not moreso. See https://www.giac.org/paper/gsec/4304/securing-public-access-computers-library-setting/107011.
While written to help secure public access terminals in libraries, the section on "Physical Security" provides some really good tips.
Kiosk software & services
The programs and web-access you allow will depend on the services you want to offer.
If the kiosk is to additionally serve as a public access documents viewing station:
You will want to include access to PC JIMS IMAGING via a public view-only-access login. IMPORTANT: To protect your Imaging data, your IT must secure the Imaging share drive/folder against any unauthorized public access/activity!!!
If the kiosk is to additionally serve as a public access to court data viewing station:
You will want to include access to PC JIMS COURTS via a public view-only-access login.