Public computer in Windows Kiosk mode accessing PiVision

Hi,

I would like to set up a "Public" computer inside our office that can access PiVision from Windows Kiosk mode (no windows login necessary). The computer is on the same AD as the pi-system but I do not want to login to PiVision using a AD-mapping account since the password is too complex and also it should not be reviled since the environment is restricted.

My first approach was to get the webbrowser to remember the AD login credentials but that doesn't seem to work when you are in windows kiosk mode. (Is there a way to solve this?)

I'm now thinking of using the old piusers group and create a demo user with read access to some pi tags. The password would then be the same as username and it would be easy to login to PiVision again if someone has closed the browser. The problem is that i don't know how to "enable" the piusers group, is it even possible to use the old piusers group in parallell to windows mapping?

There might be a completely different and better approach to solve my topic that I haven't thought of. I would appreciate if someone shared their experience in similar cases or helped me on the way with the pi Users group.

 

Thanks

Best regards,

Pär

 

 

Parents
  • Thank you both for your answers. This is a windows 11 computer and we are using PIVision 2023. Since it is a part of an AD I can't change the log in configuration myself. There are certain policies that prevents me from altering the login. Anyway I was thinking that it might be possible to make special policies for this particular demo user and this specific computer. For example , this user can only log on to this computer, and do not need to sign in with a password or maybe a simple password (lighter password policy). As a second step also tighten the security on the particular machine. I am no expert in Windows Active Directory, but is this possible to achieve? If not I will look in to your suggestion Asle.

Reply
  • Thank you both for your answers. This is a windows 11 computer and we are using PIVision 2023. Since it is a part of an AD I can't change the log in configuration myself. There are certain policies that prevents me from altering the login. Anyway I was thinking that it might be possible to make special policies for this particular demo user and this specific computer. For example , this user can only log on to this computer, and do not need to sign in with a password or maybe a simple password (lighter password policy). As a second step also tighten the security on the particular machine. I am no expert in Windows Active Directory, but is this possible to achieve? If not I will look in to your suggestion Asle.

Children
  • I would probably set up another computer than an AD-joined Windows 11 machine for this. If the whole purpose of this machine is to show PI Vision displays, I would look into a single board computer, such as Raspberry PI, and configure it to auto-start the browser with the correct display when the computer starts up. You don't need to connect a keyboard/mouse, just have it run the browser on computer startup. You may need to write a script that does the authentication for you.