Mobile Laptops and locking down
Maybe a bit of a unique situation to us in Adult Ed but we have batches of laptops (and now netbooks) that go out into the community and basically never touch the domain. Previously we had them domained and I guess they must've gone in via cached logons.
Thinking about it that seems a bit pointless, not sure how many of the GPOs stick but yet I still need to keep them relatively consistent.
I can lock them down with HDGuard (think Deepfreeze) to keep unwanted fiddling away
Use a local copy of the network mandatory profile to sort out some settings
Then just keep them as local logins or use the cached network ones?
Edit: it's looking like local profile and Start Menu, GPOs set on the machines and sticking but have to find a way around the logon scripts then HDGuard it for good measure!