RE: URLs in OPACs - security

["Richmond,Ian" <ir28@xxxxxxxxxx>]

Here are a couple of exchanges from a while ago that could be helpful.  We still run our opac terminals in Netscape super kiosk mode by doing what is in these messages. 

 

Microsoft has instructions on configuring IE in Kiosk mode. The address is:

http://support.Microsoft.com/support/kb/articles/q154/7/80.asp

Hope that helps.

McKee,  Nancy [NMcKee@xxxxxxxxxx]

AND:

We also use this method, but also there is a file under the Netscape program

folder called 'prefui32.dll'. A user can not access the preferences section

without this file so on computers that Communicator is install on the hard drive

the file is renamed to something else. Example: 'prefui32.bak'.

On the version that runs from the network we marked this file as 'no access' to

the particular users. If a user attempts to access the 'Preferences' option

from the 'Edit' menu the preferences screen will not come up.

"Richmond,Ian" wrote:

> Dear Judy:

>

> Here is the URL to instructions on how to lock Netscape to only go

> to the innopac catalogue or whatever list of urls you want:

> http://northville.lib.mi.us/tech/lockin.htm

>

> That locks down the ability to freely surf the web, but it could, of

> course, be unconfigured by someone who knew what they were doing.

>

> The next step is to run Netscape in Kiosk mode: if the shortcut for

> Netscape had a target of "C:\Program

> Files\Netscape\Communicator\Program\netscape.exe" for instance, you would

> add a -k to the end of the line:

> "C:\Program Files\Netscape\Communicator\Program\netscape.exe" -k

> (with a space before the -k)

> That will bring up a netscape with no menus or toolbars to change the

> preferences with. No back or forward buttons, either.

>

> If you want to eliminate even the frame around the Netscape window add -sk

> at the end to have it come up full-screen (they call it super-kiosk mode, I

> think). This is how we run our circulation terminals here. Super Kiosk

> mode can be gotten around by making a new shortcut and running Netscape

> without the -k or -sk.

>

> There are two approaches to lock down to the next level:

> 1. Download the Netscape Client Customization Kit from Netscape - you

> just need to unzip the Netscape Configuration Editor part of it - and use

> that to set up the preferences you want and lock them down. It produces a

> new netscape.cfg file that Netscape reads which does not allow people to

> change whatever preferences you lock down.

> 2. Use TweakUI to lock down the stations so no one can use the run

> command or change the desktop.

>

> Hope this helps - it's certainly cheap - write me if you have

> questions.

>

 

-----Original Message-----
From: Melanie Cornell [mailto:MCornell@xxxxxxxxxx]
Sent: Wednesday, April 10, 2002 9:04 AM
To: innopac@xxxxxxxxxx
Subject: URLs in OPACs - security

We use software to eliminate the URL bar from appearing to patrons at dedicated OPAC PCs.  However, some sites our records link to via the 856 tag have links on their site which enable our patrons to jump from their site to eventually link to a search engine, such as Yahoo, without needing the URL bar.  Is it possible to limit patrons using an 856 tag link from within our OPAC so that once at a site they can't jump outside that's sites domain?  We don't want our patrons surfing the internet with our dedicated OPAC PCs; we want these PCs dedicated solely to searching our catalog.  We do want to continue providing our patrons URLs within our OPAC.  Any suggestions?

 

 

Melanie Cornell
Automation Librarian
Franklin Pierce Law Center Library
2 White Street
Concord, NH  03301

 

(603) 228-1541, ext. 1135 (voice)
(603) 228-0388 (fax)
mcornell@xxxxxxxxxx

Please note: Our domain name has changed from fplc.edu to piercelaw.edu. Update your address book accordingly.