Mac Kiosk With Saft

Give Your Mac Kiosk Some Saft!


Configure a Mac Kiosk


I am constantly on the lookout for doing things more efficiently. A few months ago I posted a how-to Configure a Mac Kiosk. In the article I talk about how Mac 10.5.x OS has made it simpler to set up your computer as a Kiosk. I outline some steps using Terminal, System Preferences and a browser and what hardware I would use.

I was recently asked to put together a Kiosk environment and found a plug-in for Safari that has been available since Mac OS 10.3 Jaguar. I guess I was to set in my ways of hacking my Macs to notice it before. The plug-in is called Saft developed by Hao Li (http://haoli.dnsalias.com) has a long standing reputation and has gotten great reviews from MacWorld.

What can Saft do for you?
Saft adds features to Safari like drag-able tabs, full-screen browsing, searchable bookmarks and history, URL short cuts and a really great Kiosk mode. The Kiosk feature, modifies Safari in many ways to secure the system and user information with out having to make as many modifications to the system. Here is are some of it core features:

  • Fix menus by removing Quit, Open File, Save As, Hide, Services and more
  • Delete all cookies when going to home page after inactivity
  • Disable contextual menu for browser and plugins
  • Disable help button in dialogs if any
  • Add password protection of the preferences panels
  • Add options to limit access to Apple menu, process switching, force quit and session termination
  • Add option to go to home page after defined inactivity time
  • Allow only HTTP and HTTPS and disable Finder access via AFP, FILE, FTP and so on
  • Prevent opening multiple browser windows by opening URLs in tabs
  • Prevent JavaScript from opening and loading files
  • Stop normal termination and reboot
  • Add “Empty Cache” button in browser windows
  • Quit Finder




Getting Started
Similar to my last guide on how-to Configure a Mac Kiosk you need to replace Finder with Safari and disable Bluetooth and Keyboard Shortcuts. This will give you a basic deployment of a Kiosk. You can further restrict sites thought Saft or use Mac OS X Leopards built in Parental Controls. To start using Saft follow these few quick steps to get started.

  1. 1. Download Saft (http://haoli.dnsalias.com/Saft/)
  2. 2. Make sure you are running the latest version of Mac OS 10.5.8 and have Safari 4 installed.
  3. 3. Install http://haoli.dnsalias.com/Saft/.
  4. 4. Launch System Preferences > Accounts and create a non-admin account for kiosk deployment. See “How to Configure a Mac Kiosk”.
  5. 5. Replace Finder with Safari using Terminal. ( See Replacing the Finder below.)
  6. 6. Disable Keyboard Shortcuts and Bluetooth. Navigate to the System Preference and Turn-off Bluetooth and the same for Keyboard Shortcuts.
  7. 7. Close System Preferences.

    1. Replacing the Finder
      Next you will have to Launch Terminal (still in Guest Account):

      1. 1. Close System Preferences.
      2. 2. Launch Terminal from the Application/Utilities menu by hitting APPLE (Command) + “N”. (You can also do this from the Admin area but will have to log in as guest in Terminal with the su guest command + password)
      3. 3. Once Terminal is open type the following:

        defaults write com.apple.loginwindow Finder /Applications/Path

      4. Tip! To set the Application path you can have the Applications Folder open behind Terminal and once you have typed com.apple.loginwindow Finder drag the Application from your Applications Folder in to the waiting cursor point in the Terminal window.
      5. 4. Type “exit” and Quit Terminal and Log Out of your Guest Account.
      6. 5. Next simply Log Out and re-Log In as Guest and you should only see the application launch instead of your Finder.


      Finally Log-in to your new guest account, which will launch Safari on Start Up.

      1. 1. Find the site you want to bookmark and set it as the home splash page.
      2. 2. Go to the Finer Menu at the top and click on Run Full Finder.
      3. 3. Enter your Admin user name and password.
      4. 4. Double click on the hard drive and navigate to Saft. Once launched Set Safari as launching Saft on start up.


      Hopefully this will be easier than my last Kiosk how-to!


Configure a Mac Kiosk

How to use older Macintosh computers as a Kiosk



With the new Mac 10.5.x OS, setting up your computer as a Kiosk has never been easier. You will have to take a few things into account before you start. First you will have to have access to a Mac to configure, either an older Mac or a Mac Mini. Consider where you will be using this – will it need a internet connection? What type of access are you restricting? What Application are you targeting?

Selecting a Mac to use as a Kiosk
The minimum recommended system requirements for Mac OS 10.5.x are:

1.1 GHz processor with 1.0 GB of RAM

Most older Apple computers retain their value and used ones will range anywhere from $200-$500 depending on the vintage and the type. At $500 you are getting close to the purchase price of a
Mac mini Intel Core 2 Duo 1.83GHz
, which are continually on sale at Mac Mall for right around $500. You also could use one that you might be currently using as a short term Kiosk, possible for a trade show or exhibit. (If you plan on doing this skip to Step 2.)

Once you have the computer that you plan to dedicate as a Kiosk you should start by performing a clean install of 10.5.x Operating System. Begin by reformatting the Hard Drive and then reinstalling the system. Once complete you will have to perform all Software Updates to make sure your Security Updates are all up-to-date. Now you are ready to configure.


2. Configuring an Administrator’s Account After Reinstall.

Whether you have a clean system or if you plan on using you existing one you will have to set up User Accounts. For those who are using an existing configuration, skip this next part and move to part 3. If you have performed a clean reinstall you need to setup an Administrator Account:

  1. 1. Follow the prompts on restart and name your first user (First Name) “System” (Last Name) “Administrator”, shortname “admin”, and set a password. Make sure you set this account to “Allow user to administer this computer”.
  2. 2. Once complete you will be guided to the system screen. This is a good practice guideline and should be used any time you set up a new Mac. Next you will have to setup a guest account.
  3. 3. Start the Software Update process to make sure you are using the most current Mac OS 10.5.x.

3. Configuring Accounts, Preferences and Permissions.

Next you will have to configure a guest account.

  1. 1. Open System Preferences
  2. 2. Under System Select Accounts
  3. 3. If the lock is locked in the bottom left you will need to unlock it.
  4. 4. Next Click on the plus sign and create a new Account. Name it Guest and set an easy to remember password.
  5. 5. Do not check “Allow user to administer this computer”.
  6. 6. Check “Enable Parental Controls”.
  7. 7. Next “Open Parental Controls”
  8. 8. Select the user you want to modify, in this case “Guest”. Under System select Simple Finder and uncheck all Applications except the one you want to be your Kiosk. (In this case I am focusing on Firefox)
  9. 9. Check “Only Allow selected applications”.
  10. 10. Unckeck “Can Administer printers”, “Can burn CDs and DVDs” and “Can Change Password”.
  11. 11. Under Content you can restrict Website content. (In this case I am restricting it to AOL).
  12. 12. Under the additional restrictions you can Limit Mail, Limit iChat, set Time Limits and create Logs.

4. Killing the Dock

There are two ways of doing this, one uses Terminal the other is more primitive.

  1. 1. Launch Terminal (Still in the Admin Account)
  2. 2. Type: defaults write com.apple.dashboard mcx-disabled Boolean YES;killall Dock


The more primitive method skips Terminal, simply go to your Hard Drive: System/Library/CoreServices/.

  1. 1. Drag and copy the Dock File to your desktop. Always have a backup.
  2. 2. Rename the Dock something else; like DOG.
  3. 3. Restart your computer and log back into the Guest Area.

5. Setup the Finder, Turn off Bluetooth, Set Screen Saver

Almost there! You will have to set up your Mac now to meet your needs. Before renaming the Finder you should log in to the user account and under File Turn off the Simple Finder.

  1. 1. Launch System Preferences from the Application menu by hitting APPLE (Command) + “N”.
  2. 2. Navigate to the System Preference and Turn-off Bluetooth.
  3. 3. Setup the Screen Saver to your liking, either turn it off or set it to a image.

Next you will have to Launch Terminal (still in Guest Account):

  1. 1. Close System Preferences.
  2. 2. Launch Terminal from the Application/Utilities menu by hitting APPLE (Command) + “N”. (You can also do this from the Admin area but will have to log in as guest in Terminal with the su guest command + password)
  3. 3. Once Terminal is open type the following:

    defaults write com.apple.loginwindow Finder /Applications/Path

  4. Tip! To set the Application path you can have the Applications Folder open behind Terminal and once you have typed com.apple.loginwindow Finder drag the Application from your Applications Folder in to the waiting cursor point in the Terminal window.
  5. 4. Type “exit” and Quit Terminal and Log Out of your Guest Account.
  6. 5. Next simply Log Out and re-Log In as Guest and you should only see the application launch instead of your Finder.

Learn more using my updated post: How to Configure a Mac Kiosk Part 2

Looking for something?

Use the form below to search the site:

Still not finding what you're looking for? Drop a comment on a post or contact us so we can take care of it!

Mac Users Guide Forum

    It Seem There Is Something Wrong With BBLD Configuration, Please Check It.