I am trying to exclude visibility for my user, UserKiosk, to ONLY the 'KIOSK' subsite. The issue I am having is that, since UserKiosk is an AD user they are automatically part of the 'Everyone' Sharepoint group. This group has been added to the Intranet Visitors which grants view/read access to all of the other subsites as well. When, UserKiosk, logs into the Intranet they are able to see the other subsites (Home, Our Company, OUr benefits, etc.) and access them but cannot edit. I do not want this, I only want them to see Kiosk. Is this possible or would I have to create a totally separate site/site collection?
The only way to do this would be to move KIOSK to a different site collection on a different web application and then add a Policy to deny access to the original web application or delete the group everyone and replace it with one that doesn't have kiosk inside.