I have quite a few win2k boxes for the public here at the library in Abbeville and I don't really lock them down much at all. I use a hardware based product called centurion guard ( http://www.centuriontech.com/centurion-about.htm ). With this installed, the patrons can have full access to the machine and actually learn about the computer without the fear of messing anything up. You can even format the drive and reboot and the OS starts right back up.
I just got 10 laptops to do some classes and I'm going to use driveshield which is the software version of centurion guard to lock them down. It really is a great product. There is even some free software from this company that allows you to unlock and reboot all of the computers from over the network . Once you have made your changes, just lock them back with the software and issue a reboot. I don't have 200 public computers, but for the ones I do have this works great. On the other hand, I do use the LTSP for some machines that I have turned into standup kiosks for browsing the web based card catalog. Here is a rundown of linux usage in Abbeville branch of the Vermilion Parish Library: Web server for www.vermilion.lib.la.us secondary dns server for state.lib.la.us backup server for state library databases ltsp server for card catalog clients coyote linux firewall for public dhcp to keep the public wireless and public ethernet jacks out of the staff network fedora computer in my office as a test box knoppix for recovery and troubleshooting aprsd server (on the ltsp box) samba server using ps2pdf to print pdf files (this is on the ltsp box) and our automation system is fixing to be switched over to linux http://www.atriuum.com/ Adam J. Melancon
