The information in this document applies to non-granted public access computers running either: the Windows 2000 Professional operating system with Service Pack 2 or later installed; or the Windows XP Professional operating system.

NOTE: These instructions do not apply to Windows XP Home. The Public Access Computer Configuration Tool does not function on computers running Windows XP Home.

The Public Access Computer Configuration Tool is a software security system designed by the Bill & Melinda Gates Foundation for public access computers. You can install it to help keep a computer stable by restricting access to the computer and creating customizable profile environments designed to meet the needs of public computer users without compromising your ability to keep the computer up and running.

Follow these instructions to install the Public Access Computer Configuration Tool and set up a computer for public access using this software. After you complete these steps, the computer you have set up will contain the following new user accounts: all, bigprint, child, language, spanish and staff. By default, the staff user account has the password staff assigned to it. None of the other accounts includes a password. To learn more about the default settings automatically set up by the Public Access Computer Configuration Tool, read Overview of the Public Access Computer Configuration Tool, available from www.PAComputing.org.

Some of the procedures in this document apply only to particular operating systems, and some are optional. Make sure you read the headings carefully to determine whether you need to complete each procedure.

Windows 2000 Professional Computers Only: To Change User Rights for the Administrators Group

1. Log on as an administrator to the computer on which you will install the Public Access Computer Installer.
2. Click Start, point to Settings, and select Control Panel. The Control Panel opens.
3. Double-click the Administrative Tools icon. The Administrative Tools window opens.
4. Double-click Local Security Policy. The Local Security Settings window opens.



5. Double-click Local Policies in the left pane.
6. Double-click User Rights Assignment in the left pane.



7. Double-click Act as part of the operating system in the right pane. The Local Security Policy Setting dialog box appears.
8. Click Add. The Select Users or Groups dialog box appears.
9. Select Administrators, and click Add.

IMPORTANT: In Step 9, be sure to select the Administrators group (the icon with two heads) and not the Administrator user account (the icon with one head).

10. Click OK in the Select Users or Groups dialog box.
11. Click OK in the Local Security Policy Setting dialog box.
12. Close the Local Security Settings window.
13. Close the Administrative Tools window.
14. Log off from the computer.

IMPORTANT: If you skip Step 14, the user rights you granted will not take effect and the installation of this software will fail.

Windows XP Professional Computers Only: To Change User Rights for the Administrators Group

1. Log on as an administrator to the computer on which you will install the Public Access Computer Installer.
2. Click Start, and select Control Panel.
3. Double-click Administrative Tools.

NOTE: You might need to switch to Classic View to see this option.

4. Double-click Local Security Policy.
5. Double-click Local Policies.
6. Double-click Security Options.
7. Scroll down to the bottom of the right pane, and double-click System Objects: Default owner for objects created by members of the Administrators group.
8. Click the downward-pointed arrow to the right of the list, and select the Administrators group.
9. Click OK, and close the Security Settings window.
10. Close Administrative Tools.
11. Log off from the computer.
12. Log back on to the computer as an administrator.

Windows XP Professional Computers Only: To Set Up the Logon Screen (Optional)
This procedure is highly recommended, because by default Windows XP shows a list of all user accounts on the computer at the logon screen, including the administrative accounts. This is a security risk. Use this procedure to switch from the default Windows XP logon screen to one that resembles the logon screen for Windows 2000, which doesn't reveal the names of the user accounts.

1. Click Start, and select Control Panel.
2. Double-click User Accounts.
3. Click Change the way users log on or off.
4. Uncheck the Use the Welcome Screen and Use fast User switching boxes.
5. Click Apply Options.
6. Close all open windows.

To Download the Public Access Computer Configuration Tool Files

1. Log on as an administrator to the computer on which you will install the Public Access Computer Configuration Tool.
2. Launch a Web browser, such as Internet Explorer.
3. Type the following address into your browser’s address box: www.PAComputing.org/downloads/PAC_Installer.exe, and press ENTER. The File Download dialog box appears.
4. Choose Save to Disk, and select Desktop as the location.
5. Click OK, and wait while files download.
6. When the download process is complete, close the File Download dialog box.
7. Click the link for the appropriate operating system configuration file. The File Download dialog box appears.
8. Choose Save to Disk, and select Desktop as the location.
9. Click OK, and wait while files download.
10. When the download process is complete, close the File Download dialog box.
11. Close the Web browser.

To Unzip the Public Access Computer Configuration Tool Files

1. Double-click the PAC Installer.exe file on your desktop. The WinZip Self-Extractor dialog box appears.
2. Click Unzip. The files are extracted to C:\BMGF Utilities\PAC Installer. A message appears, indicating the files have been unzipped successfully.
3. Click OK.
4. Click Close in the WinZip Self-Extractor dialog box.
5. Double-click the file for the appropriate operating system on the desktop. The WinZip Self-Extractor dialog box appears.
6. Click Unzip. The file is extracted to C:\Program Files\Public Access Computer Configurator\Public Access Computer Installer. A message appears, indicating the files have been unzipped successfully.
7. Click OK.
8. Click Close in the WinZip Self-Extractor dialog box.

NOTE: You can now remove the PAC Installer.exe and configurations file from your desktop if you wish to do so.

To Install the Public Access Computer Configuration Tool Files

1. Double-click My Computer. The My Computer window appears.
2. Double-click the icon for drive C. The contents of drive C appear.
3. Double-click the BMGF Utilities folder. The contents of the folder appear.
4. Double-click the PAC Installer folder. The contents of the folder appear.



5. Double-click the Setup.exe file. The Public Access Computer Installer Setup screen and dialog box appear.
6. Click OK.



7. Click the drawing of the computer to begin the installation. The Public Access Computer Installer – Choose Program Group dialog box appears.
8. Click Continue.
9. Click Yes if you are prompted to keep an existing version of a file that is newer than one being copied to your computer.
10. Click OK in the message stating that the Public Access Computer Installer setup has completed successfully.
11. Close all open windows.

To Install the Public Access Computer Profiles Component

After you complete this procedure, the following user accounts and profiles are installed on this computer: all, bigprint, child, language, spanish and staff. These users’ profiles are unrestricted at this point. To secure the profiles, you must complete the rest of the procedures in this article.

1. Click Start > Programs > Public Access Computer Configuration Tool > Public Access Computer Installer. The Public Access Computer Configuration Tool dialog box appears.



2. Check the Public Access Computer Profiles box, and click Install. A series of messages and windows appear on your computer screen as the Profiles component is installed. This process typically takes 1 to 2 minutes, but times vary widely. When the installation is complete, a message indicates the installation was successful.
3. Click OK.

To Set up the Users’ Profiles

1. Log off from the computer.
2. Log on as all.
3. Modify all’s profile. For example, you might consider changing the color of all’s desktop to something unique, and providing all with access to commonly used programs via desktop shortcut icons.
4. Launch each program all can access, so these programs can initialize after the profile has been secured.
5. Log off from all.
6. Repeat steps 2 through 5 for each of the other profiles you want to set up.

To Install the Public Access Computer Profiles Restrictions and System Restrictions Components
After you complete this procedure, the users profiles are secured. To learn more about the default settings automatically set up by the Public Access Computer Configuration Tool, read Overview of the Public Access Computer Configuration Tool at www.PAComputing.org.

1. Log on as an administrator.
2. Click Start > Programs > Public Access Computer Configuration Tool > Public Access Computer Installer. The Public Access Computer Configuration Tool dialog box appears.



3. Check the Public Access Computer Profile Restrictions and Public Access Computer System Restrictions boxes, and click Install. A series of messages and windows appear as the Profile Restrictions and System Restrictions components are installed. This process typically takes 30 to 60 seconds, but times vary widely.
4. Log on as each of the users to confirm the security restrictions are in effect.