running win 7 in a kiosk setting

steady state was the microsoft product which was used to manage PCs in
libraries and other public settings?
http://www.microsoft.com/downloads/details.aspx?familyid=d077a52d-93e9-4b02-bd95-9d770ccdb431&displaylang=en

But, steady state does not support win7
http://www.microsoft.com/downloads/details.aspx?familyid=d077a52d-93e9-4b02-bd95-9d770ccdb431&displaylang=en

I suppose I need the following to secure a PC that the public logs onto:
  - no cookies, user names, passwords stored in the browser
  - no permanent storage for the logged in user on the PC
  - can't download or install apps
  - each login runs in a VM - over kill?

Is this all doable using active directory?

I am thinking of charging people to come into my storefront computer
shop and order online from sites like NewEgg.

thanks,