Anybody have any ideas/experience with maintaining public use (classroom) computers?
I have been sorta Self Tasked with maintaining a classroom of less than 20 computers. these willbe used for training, and other semi public use tasks.
The computers as they stand do a dual boot. (debian/xphome) we want to both make those computers more secure(functional but free from spyware/viruses/user installed crap), but also make the patch/update progress as easy as possible.
as far as i have figured it, there are a couple of ways,
one way,
Maintain like 20 separate images (ghost or something like that) push those configs out to each computer (i would do a single config, but due to microsoft licensing they all need a unique serial and im sure some of the hardware is unique). any system like this will be a pain for the nearly daily antivirus/windws updates.
the other way, use some sort of incremental backup so we can roll back to a clean state, plus some sort of lockdown software. Deep Freeze (faronics.com) or something like that? (any suggestions?), updating the computers will still be a pain, but probably better
and the last way, would be to combine the system images mentioned in the first way, but then just rely on windows's system restore, to put the pc's back into a state when they were known to be clean and ok. and restoring them when they get to buggy/full of crap.
any ideas(pitfalls to avoid) or advise would be welcome!