Locking down features of the Mesa 2
10 Sep 2018
Features of the Mesa 2 can be locked down to not be accessible by some or all user accounts. KIOSK mode and developer frameworks are available to prevent user access to features or to lock users in to a certain app. Some preliminary information for KIOSK mode is provided at the following web page.
If not wanting a single-app KIOSK mode, individual features can be disabled separately. While logged in using an Administrator account, you can tap and hold on Start then open Device Manager to disable or uninstall features such as the following.
- System devices > Camera Sensor IMX175
- System devices > Camera Sensor OV2722
- Network adapters > Broadcom 802.11abgn Wireless SDIO Adapter
- Broadcom BCM43241 Bluetooth 4.0 + HS module
- Audio inputs and outputs > Microphone (Intel SST Audio Device (WDM))
You can also set group policies to prevent those features from being enabled or re-installed such as after a major Windows Update. Some general steps are as follows.
- Win+R, gpedit.msc
- Computer Configuration > Administrative Templates > System > Device Installation > Device Installation Restrictions
- Double click "Prevent installation of devices that match any of these Device IDs".
- Click the "Enabled" radio button
- Click the "Show" Button
- Add Device IDs for each feature (such as the USB VID and PID numbers)
The above restrictions work for most applications. Though if you need to have features disabled at a lower level in the firmware, you can contact firstname.lastname@example.org to negotiate costs for creating a custom firmware version for you.
Though it is not recommended, it is technically possible to electronically disconnect or physically remove the integrated hardware for such features from a Mesa 2 unit. Contact email@example.com to negotiate custom modifications to existing unit(s), or contact firstname.lastname@example.org to negotiate for custom new units.