How can I make a dumb terminal?

[minime]

Hi,

I'd like to configure a Win7 system (ZOTAC MAG HD-ND01 Dual-Core All-in-One PC) in a way, so the user can't attach or use anything except the display-port, a mouse and a keyboard. Everything else should (reliable, even for experts) be disabled: Esata, USB (except mouse and keyboard), card reader, LAN, wireless.

Only the administrator should be able to use those ports.

Any idea how I could achieve that? Or do you know a cheap PC, where you can disable all this stuff in the BIOS settings (incl. my USB requirements)?

Thanks,
Mike

 

[mckillwashere]

Its called pliers
Its what the military does.

 

[minime]

Yeah, but I need a little bit more sophisticated solution as the administrator should be able to copy data from the PC (Internet and USB must work under administration rights).

 

[mckillwashere]

disable the onboard NIC in the bios, and set A bios password.
Make a custom back plate, like only the VGA port and maybe the audio.
everything else covered, and lock the case.
Seems drastic, but it could work

 

[minime]

Yeah. That's one way to do it. Thanks!

 

[rddash]

Are you using Group Policy? If so, you can set it so that all devices ( ports, etc) are disabled, except for X devices.