Device Lockdown (Standard 8)


Review an overview of locking down your Windows Embedded 8 Standard (Standard 8) device.

Device lockdown refers to providing a controlled and specialized experience for the end user of a device, mainly by limiting the ways in which an end user can interact with the device. There are many reasons for locking down a device, such as protecting the system from malicious users, providing a custom defined user experience, and increasing system reliability.

Because Windows Embedded 8 Standard (Standard 8) is based on Windows 8, you can use many of the Windows 8 lockdown features, such as AppLocker, Windows Firewall, and Group Policy settings, as part of your lockdown strategy. In addition, because devices often function as appliances, they can have additional lockdown requirements beyond those of a Windows 8 device.

For example, your device may be a dedicated cashier device that runs a full screen cashier application, and you may want to prevent users from being able to use Windows shortcut keys like Alt+Tab to switch out of the application or Alt+4 to close the application.

To support these additional requirements, Standard 8 offers additional lockdown features specifically for devices, such as write filters, keyboard filters, and pop-up window blockers.

You can use these device-specific features to support scenarios such as enabling stateless devices, hiding specific pop-up windows or dialog boxes, and preventing users from locking the device by using the Ctrl+Alt+Delete key combination.

You can download a large-scale technical poster that describes how to add and configure lockdown and branding features to your Standard 8 operating system.

Lockdown Features for Standard 8

Describes the additional lockdown features that Standard 8 provides.