Restrict Hard Drive

Quote from Raju : As far as I understand they only need to browse the Internet and print. They shouldn't need access to anything else. No saving or anything else.

Do they need access to any web browser other then Internet Explorer? Does it need access to the internet at large or just a very specific website?

You can use an alternate windows shell instead of windows explorer (like internet explorer), apply security policies and other customization to internet explorer [microsoft.com], apply software restriction policies and prevent them from doing most things they shouldn't (including launching windows explorer). If you really want to completely lock it down with minimal effort tools like deep freeze are great, but in many cases adequate results can be obtained freely but require more time and effort.

Basically this: http://www.ehow.com/how_7503804_b...kiosk.html plus various security and app restriction policies (using an account with guest like permissions start with USGCB [nist.gov] and add additional restrictions you want, specifically to IE [microsoft.com] and windows explorer, and app restriction, block access to task manager from ctrl-alt-del). Putting IE into kiosk mode (-k) may actually be too restrictive for your needs. Blocking/locking things that might otherwise only be accessible via keystrokes is important. Privacy of users may be important too (hiding history and purging cookies). You may want to automate an auto log off and force acceptance of an AUP (click ok and it will auto login) using something like this [grimadmin.com] to auto log off.

What is the specific environment the computer will be placed in? Will it be used for anything else (authenticated users / anything secure)?

Even with programs like deep freeze, it's also good idea to make other modifications to security policies etc.