We have a web application that is accessed via kiosk workstations. We are looking for a way to track usage of each individual kiosk. Using the IP address was our first thought, but we quickly realized this wouldn't work since these particular machines are behind networks with dynamically allocated IP addresses.
To accomplish this it was suggested that we create a simple application that can run as a startup service on each machine. This service would then create a cookie containing a unique identifier and save it in the cookies directory of the web browser being used.
From then on each request sent to the web application would send the cookie containing the identifier, allowing for the web application to track the exact machine making the request.
Should this be done this way? My first instinct is to say no, or if it is, it shouldn't be done because a browser should remain sand boxed from the environment it's running in...right?