GPO & Mandatory Profile

I am configuring a kiosk profile for a timeclock application on a pc. I can
really lock the desktop down and autoadmin login with the user and the
program to start at login, but the user can close the program. My thought was
to place the program shortcut on the desktop in case that happens so the
users can start the program. However, if I enable "Hide and disable all items
on the desktop" the desktop icon from my manadatory profile disappears. If I
disable that setting the desktop is vulnerable.
What other solutions do I have to allow the user to launch just one program
if needed?

I pinned the program to the start menu and unlocked pinning. Now the desktop
is secure and I can relaunch the progam if needed.

"tkutil" wrote:

> I am configuring a kiosk profile for a timeclock application on a pc. I can
> really lock the desktop down and autoadmin login with the user and the
> program to start at login, but the user can close the program. My thought was
> to place the program shortcut on the desktop in case that happens so the
> users can start the program. However, if I enable "Hide and disable all items
> on the desktop" the desktop icon from my manadatory profile disappears. If I
> disable that setting the desktop is vulnerable.
> What other solutions do I have to allow the user to launch just one program
> if needed?