!!Desktop Security 
Your primary concern is data integrity.  There should be no way for students to not take responsibility for the consequences of their own actions on the computers.  The best way to make this happen is to erase the consequences of student's actions.   
!!Deepfreeze
Deepfreeze is the program that does this, you can experiment with Deepfreeze to create the most effective install each semester. The basics are as follows:
*Deepfreeze administrator should be ran from a non-frozen computer, like Kefka (the helpdesk computer).
*Deepfreeze administrator should be set to freeze the windows system partition and reboot the computers each night. An EdGCM drive should remain unfrozen.
*You may want to experiment with maintenance times. However, this can seriously damage people's work, so choose a time wisely. 
*Deepfreeze creates a file which is used for both installation and uninstallation (only when computer is unfrozen)
*To unfreeze a computer press ctrl-alt-shift-f6 (and reboot, since no changes made until reboot are saved)
!Note
Do not [image|?page=imaging] a deepfrozen computer with G4U, although DriveImageXML works ok.
!Administrator Logon
The reason Deepfreeze is on this page and not it's own section is because it's existence is the only reason it is OK to let all the computers have total access to the operating system.  There is seriously no part of the kernel which a user cannot modify.  
Because of [Software Issues|?page=software_issues] involving [ArcGIS] and administrator privileges, it was deemed prudent to allow all students administrator rights to all computers.  This means:
*The password to each computer should be blank and user administrator should autologon.
*For all non-printservers outside the labs administrator accounts MUST be set to a secure password, not blank.
*Print servers should not allow user "administrator" with a blank password to modify any settings. 
On recent images, this problem may have been eliminated, but for [ArcGIS] to run, the user still needs to be in the administrators group. 
Users can have administrator privileges only because Deepfreeze will reverse any damage they inflict on the system. 

See also ([Firewalls])