We are working to lock down a pc as a kiosk using mainly group policy and registry edits in on a domain Windows 8.1 Enterprise machine. Currently we have it pretty well secured. The only thing left that we would like to restrict access to is the All Apps view from the start screen. We need to keep the main view of the start screen as our kiosk interface, but we need to lock it down to prevent access to any programs we don't have specified to be on the start screen. Even removing the arrow at the bottom of the start screen to switch to the all apps view would get it to be the way we need it. The other option would be to remove the search bar from the top right of the all apps view, because that is the only way for users to get out. A user can simply type "cmd" in that search bar and launch the command prompt, or any other system utility.
So essentially we would like to prevent all access to the All Apps view of the start screen while still being able to access the main view of the start screen, or remove access to search from the All Apps screen.
Please let me know if you have any ideas about how to do either of these items. Thank you!