Support Suite

Overview

The Kiosk requires admin privileges to validate your registration every time you launch it. It requires full access to a specific registry key in the HKEY_LOCAL_MACHINE registry hive. Also, it requires permissions to the Windows WMI repository. Finally, the UAC has to be off.

Solution

You can run the Kiosk with standard user (non-admin) but you have to do the following steps:

1. Turn on the Kiosk machine
2. Login with your standard user
3. Open up Windows Explorer and go to this path “C:\windows”
4. Shift + Right click on “regedit.exe” and run it as Administrator
5. Then enter your admin credentials
6. Navigate to this registry key: “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion”
7. Right click on the “CurrentVersion” registry key and click on “Permissions”
8. Then click on “Advanced” button
9. Then click on “Add” button, to add the standard user
10. Select the standard user and give full control to that key and subkeys
11. 
12. After that, click on OK button until you close all opened screens
13. If you have 64 bit operating system, navigate to this registry key: “HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion” then repeat steps 7 to 12 above
    
14. Navigate to this registry key: “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System”
15. Change “EnableLUA” registry value to “0”
16. 
17. Open up Windows explorer and navigate to this path “C:\Windows\System32”
18. Shift + Right click on “WmiMgmt.msc” and run it as Administrator
19. Then enter your admin credentials
20. Right click on “WMI Control (Local)” and click on “Properties”
21. Backup your WMI repository from the “Backup/Restore” tab to a safe place on your local disk
22. Then click on the “Security” tab and select the “Root”
23. Then click on the “Security” button
24. Then click on the “Advanced”
25. After that click on “Add” button to give the standard user permission
26. Select the standard user and check Execute Methods and Enabled Account checkboxes
27. Select in the Applies to drop down “This namespace and subnamespaces”
28. 
29. After that click on OK button until you close all opened screens
30. Open the File Explorer to grant the non-Admin User Account "Write" Permissions to the EIOBoard Kiosk PC install path folder.
    The Visitor Photo writes to this path before uploading it to the database. By default this install path is: "C:\Program Files (x86)\Savance\EIOBoard Kiosk"
31. Finally restart the Kiosk machine and run the Kiosk or set the kiosk to auto logon using the standard user profile you created.
32. The end.
    

Notes:

• Solution also applies to machines which are connected to a domain
• These steps can be applied to EIOBoard Offline and EIOBoard Punch