Or if you want to get real Draconian, install Deep Freeze on the computer. So when the computer is rebooted, all changes to the filesystem are reset back to the original 'frozen' state.
Back when I administered computer labs, I used Deep Freeze. It alleviated any malware issues. Home directories (network mounted) were excluded from Deep Freeze checksumming so users could still save files and preferences. But the system was protected.
Back when I administered computer labs, I used Deep Freeze. It alleviated any malware issues. Home directories (network mounted) were excluded from Deep Freeze checksumming so users could still save files and preferences. But the system was protected.





Comment