Windows Shell Launcher exit event meaining

Question

Hello, I have a question regarding exit events for Windows Custom Shell Launcher.

I know there is a measure to restart or turn down the machine if exit event occured.

Having that in mind, will that cover if someone manages to open explorer.exe without actually closing the application that shell launcher is configured to and restart the shell?

I am looking for a way to double harden the kiosk and take care if someone manages to open explorer.exe.

Thank you

Answer 1

You may use Windows AppLocker or Software Restriction Policies (SRP) to prevent the execution of explorer.exe and any other unwanted applications.

In Start Search type gpedit.msc and hit the Enter key.

Now navigate to Computer Configuration -> Windows Settings -> Security Settings -> Application Control Policies -> AppLocker.

Create a new executable rule to deny explorer.exe for all users except those who need access (e.g., administrators).

Again, open the Local Group Policy.

Navigate to Computer Configuration -> Windows Settings -> Security Settings -> Software Restriction Policies.

Create a new rule to disallow explorer.exe and any other unwanted executables.

Answer 2

Hi Nikola Nikolov,

Thanks for your post. Based on my research, here are some limitations to consider when using Shell Launcher:

• Windows doesn't support setting a custom shell before the out-of-box experience (OOBE). If you do, you can't deploy the resulting image
• Shell Launcher doesn't support a custom shell with an application that launches a different process and exits. For example, you can't specify write.exe in Shell Launcher. Shell Launcher launches a custom shell and monitors the process to identify when the custom shell exits. Write.exe creates a 32-bit wordpad.exe process and exits. Since Shell Launcher isn't aware of the newly created wordpad.exe process, Shell Launcher takes action based on the exit code of Write.exe, such as restarting the custom shell

Reference:

What is Shell Launcher? - Configure Windows | Microsoft Learn

Best Regards,

Ian Xue

---

If the Answer is helpful, please click "Accept Answer" and upvote it.