This is a bit old now, I realize, I must have notifications turned off. For non-interactive or single-webpage (and that’s it) kiosks, I’ve used Linux, generally Ubuntu set to auto-login and auto-launch Chrome in kiosk mode, something like ‘/opt/bin/google-chrome --kiosk=“https://example.com/url”’. This is how we do a couple of our timeclock machines, both on touchscreen machines. Since I wanted software keyboard disabled due to the timeclock webpage layout, I just plugged in a USB number pad, but no keyboard or mouse. Works great.
For interactive kiosks, like our check-in machines, we have Windows 10 with a ton of GPO on them, plus I made an AutoHotkey script to intercept pretty much all non-necessary key presses. The Explorer.exe shell is replaced with a .cmd file that launches Chrome in kiosk mode, and while there’s a full keyboard + touchscreen so people can type on either, and a printer, etc., the only way out is ctrl + alt + delete and switch user. Ctrl+Q, alt+f4, etc. have all been disabled. As has locking the screen. The really nice thing about this setup is that IF they need to be momentarily used for something else, as most of the lockdown settings (like the AutoHotkey script and shell replacement via GPO) are user-specific. The other user setup on the machines is a local admin and has no real restrictions. Want to go back to kiosk? Just reboot.