How can I lock-down a browser on a Windows 10 single app kiosk?

Question

I am designing a Windows 10 Enterprise build 1909 kiosk that will present a web-based app.

The device will auto-login and use the Shell Launcher feature of Windows 10 to launch a browser that opens the URL to the web-based app.

I have got most of this working using a PowerShell script that replaces the Explorer shell with Chrome in kiosk mode. I would like to lock the browser down to prevent access to the file system.

For example, when the browser loads the app, I can press CTRL+O to present the Chrome "Open" dialog box. This includes a browser window that lets me navigate the computer's hard drive where I can double-click and launch Explorer.exe or CMD.exe. I would like to disable all key combinations that might present a dialog box allowing me to access folders and files on the hard drive.

I have downloaded Google's group policy templates from this location: https://support.google.com/chrome/a/answer/187202?hl=en I looked at the list of policies but I do not see one that blocks key combinations like I want.

Is there a way to lock down these Google Chrome key combos? If I were to use Microsoft Edge instead of Chrome would it allow me to prevent key combinations to lock-down a kiosk like I want?

Thanks!
Elroy

Answer 1

Have you tried implementing the Windows KeyboardFilter to block hot keys? It is for windows, but it might be worth a shot to see if it will work in general.
There appears to be a Chrome add-on that might do the trick: https://windowsloop.com/disable-google-chrome-keyboard-shortcuts/