Call Savance EIOBoard Call Us: (248) 478-2555

 

Savance EIOBoard Support

Main

Knowledgebase: Kiosk Interface
Running EIOBoard Kiosk With Non-Admin User
Posted by Michael Renock on 23 February 2017 07:05 PM

Overview

The Kiosk requires admin privileges to validate your registration every time you launch it. It requires full access to a specific registry key in the HKEY_LOCAL_MACHINE registry hive. Also, it requires permissions to the Windows WMI repository. Finally, the UAC has to be off.

Solution

You can run the Kiosk with standard user (non-admin) but you have to do the following steps:

  1. Turn on the Kiosk machine
  2. Login with your standard user
  3. Open up Windows Explorer and go to this path “C:\windows”
  4. Shift + Right click on “regedit.exe” and run it as Administrator
  5. Then enter your admin credentials
  6. Navigate to this registry key: “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion”
  7. Right click on the “CurrentVersion” registry key and click on “Permissions”
  8. Then click on “Advanced” button
  9. Then click on “Add” button, to add the standard user
  10. Select the standard user and give full control to that key and subkeys
  11. After that, click on OK button until you close all opened screens
  12. If you have 64 bit operating system, navigate to this registry key: “HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion” then repeat steps 7 to 12 above
  13. Navigate to this registry key: “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System”
  14. Change “EnableLUA” registry value to “0”
  15. Open up Windows explorer and navigate to this path “C:\Windows\System32”
  16. Shift + Right click on “WmiMgmt.msc” and run it as Administrator
  17. Then enter your admin credentials
  18. Right click on “WMI Control (Local)” and click on “Properties”
  19. Backup your WMI repository from the “Backup/Restore” tab to a safe place on your local disk
  20. Then click on the “Security” tab and select the “Root”
  21. Then click on the “Security” button
  22. Then click on the “Advanced”
  23. After that click on “Add” button to give the standard user permission
  24. Select the standard user and check Execute Methods and Enabled Account checkboxes
  25. Select in the Applies to drop down “This namespace and subnamespaces”
  26. After that click on OK button until you close all opened screens
  27. Open the File Explorer to grant the non-Admin User Account "Write" Permissions to the EIOBoard Kiosk PC install path folder.
    The Visitor Photo writes to this path before uploading it to the database. By default this install path is: "C:\Program Files (x86)\Savance\EIOBoard Kiosk"
  28. Finally restart the Kiosk machine and run the Kiosk or set the kiosk to auto logon using the standard user profile you created.
  29. The end.

Notes:

  • Solution also applies to machines which are connected to a domain
  • These steps can be applied to EIOBoard Offline and EIOBoard Punch