Prevent employees from using anything else but my proprietary application I will be getting several mac minis for different branches that will have installed my software application which I need my employees to use. I need to make sure of the following:


When the computer starts for my application to be on in full screen mode
For the user to not be able to exit the app
For the user to not be able to start plugging in their personal usb sticks and try to hack/view movies on the computer - one solution would be to lock the computer away and expose only the touchscreen graphic display. I suppose if my application automatically covers the full screen then the user would not be able to go into the finder app and browse through their files.


Most elegant solution is preferable, as long as the solution gets the job done effectively without any round about ways to by pass this setup.
You will likely want to look at the Parental Controls (System Preferences). While it won't prevent them from moving around in OS X, it will prevent them from running other applications that you have not explicitly authorized.



A detailed view rundown can be found here: http://www.dummies.com/how-to/content/how-to-limit-the-capabilities-of-a-user-in-mac-os-.html