Professional services told me to contact the hardware manufacturer, who pointed me to a Microsoft lockdown tool that only works on the creation on embedded image, which you cant get access to unless you are a manufacturer. The kiosk mode in windows 8 used under a local user will do exactly what I need but it is not available in a domain. It will only allow a specific program, and it will relaunch it if it is closed. Almost the same as Shell.
I dont know about your environment but I have had support calls from supervisors saying people could not clock in and all they needed to do was click the one and only mes icon on the desktop... I built self service kiosks for almost a decade so I am well aware of the options, policies and third party programs but epicor is selling hardware designed to run their software (as a dedicated timeclock) without any reference whatsoever on how do so. They do not do this with the regular client application, nor the server application, nor most modules. MES (and the handheld) are more or less undocumented if you want to modify how they run on a client. Go ahead and try to install the HH on any handheld, good luck unless it is an intermec. I have had it running on an android phone as well as a few other handheld scanners but finding setup information is almost impossible,
Really the only reason I asked instead of doing it myself was that it was a total surprise that e10 would not run on my existing winxp MES station (which look to be exactly the same as my new embedded 8 stations). I had to get them deployed in 6 hours after getting the runaround for over a week from epicor, all the while thinking I could use the old stations until the new ones were setup correctly.
I figured this group might have some insight into win8 with MES for E10 but perhaps I will write a setup guide instead.