Feature updates for Windows Embedded Standard 7 SP1 are now available on ECE. This update contains one new feature (Keyboard Filter), one new application template (Microsoft Visio 2010 Viewer) and Help Content updates.
The Windows Embedded Standard 7 SP1 compatible application template and documentation, for use with Microsoft Visio 2010 Viewer. The compatible application template allows creation of a Windows Embedded Standard 7 image that is compatible with Microsoft Visio 2010 Viewer. Microsoft Visio 2010 Viewer allows Visio drawings and to be displayed in Internet Explorer, even if the recipients do not have Visio installed on their computers. Internet Explorer also allows for printing, although this is limited to the portion of the drawing displayed.
The Keyboard Filter for Windows Embedded Standard 7 allows administrators to configure an embedded device to prevent certain keyboard or combination of keyboard input. For example, the keyboard filter feature allows an embedded device to be configured to ignore the [CTRL]+[ALT]+[DEL] keyboard input to prevent a user from getting access to the windows shutdown screen.
Help topics for the following Windows Embedded Standard 7 SP1 packages are included in the help content update:
The new features are rolled into the Windows Embedded Standard 7 SP1 September 2011 Feature Update.
Can the Keyboard Filter by configured on a USB port-by-port basis. In other words, can I filter keyboard input on a particular USB port but not others? Thanks!
Thanks for your question, currently the Keyboard Filter does not support configuration on a port-by-port basis.
Hi David, I think I answered your question on the forums. Keyboard filtering is global for all keyboards, including combinations of USB, PS/2, Bluetooth, and others.
If you are trying to block all keys for all keyboards except for one, there might be other approaches that might help, maybe a PnP feature can be used. There's a group policy that could work under Computer Configuration, Administrative Templates, System, Device Installation, Device Installation Restrictions. This might help.
Hehe... as i said in the board. And also don't forget the ability to exclude administrators.
How can I get hold of this (or verify if I'm running this) as an end user? I'm assuming I can't get an ECE login, so will have to wait for Wyse/HP/etc. to incorporate this into their thin client units. How can I tell whether they have done or not?
Also, I want Ctrl-Alt-Del to pass through to a full screen Remote Desktop session. Presumably the keyboard filter driver will just block that key combination full stop (i.e. both locally and in the remote session)? Surely I'm not the only person who wants to do this? Help!
We certainly did think of this feature, it would be very handy to be able to press Ctrl+Alt+Del on a thin client and have that key combination transmitted to a VM which handles the sequence instead of the thin client.
The problem comes down to doing it securely and we don't have a good answer to that. The biggest fear is that someone would configure this and using a hook intercept Ctrl+Alt+End to show a fake logon screen used to capture unsuspecting passwords.
Sorry. We really are trying to think of a good solution to this problem, but security has to be our priority.