Slightly off the question...
A while back someone asked if roaming profiles creates a local profile
on the computers. I had asked one of our school tech coordinators and
he had replied that yes, they do. However, I have since found that
mandatory roaming profiles do not add local profiles to a machine.
Also, mandatory profiles do not save any changes made by the student.
Between this and group policies (which can be made part of the roaming
profile), we have been able to keep our machines fairly stable. Worth
noting, however, if you use Vista clients, you cannot use an NT server
for roaming profiles.
Franklin Northwest Supervisory Union
100 Robin Hood Drive
Swanton, VT 05488
Craig Lyndes wrote:
> Dear Folks,
> I know that this topic has been on the list recently (I have been
> lurking). However at my new job I have observed that their attempt at
> desktop security has some negative consequences that I would like to
> fix. They are currently using Windows Domain Logins with profiles
> that on their older, slower machines make boot-up take up to 5 minutes
> (creating a new profile for each student) and clutter up the hard
> drives with old profiles.
> Cut to the chase - Are there any schools out there that are using Disk
> Imaging as a part of their desktop security system?
> What I am proposing is to have some computers where the users have
> full access to the local machine. They can install plugins, change
> the desktop, do whatever they wish with the computer. If something
> happens to the machine that causes it to become compromised then the
> computer is reimaged from a standard image stored on the network. If
> you are using an imaging solution, which one, what are its benefits
> and how much does it cost? Are there any repercussions to having
> unlocked desktops (not everywhere, but where appropriate and requested)?
> Question #2 - What are people using for desktop security that is
> installed locally on the computer, not a server/login based solution?
> I am not enamored with Windows servers and am thinking of going open
> source for network resources. This would require the machines that
> need to have the desktop managed have something locally installed. I
> am familiar with Deep Freeze, which seems to work very well. I've
> also struggled with Fortress, which I found to be very good at
> disabling the machine upon which it is installed, and therefore a less
> than ideal solution. What are people using? We are using Icon Lock
> successfully on the Win 98 machines (approx 1/3 of the machines still).
> Thanks In Advance
> Craig Lyndes
> Franklin Central SU