What a long strange trip since my first post on this board.
I've mostly survived the year so far with only minor tweaks to the existing mess that I inherited, but I've recently come to realize that I may need more for the home stretch.
My predecessors did not like group policy and almost seemed to design a system to prevent its proper use. I'm aware of the power of group policy, but not a gpo expert or confident enough to use it as a sole means to prevent student (and teacher) misdeeds. I've played with programs like netsupport protect, but it's buggy and does not allow for multiple levels of limitations (just on or off).
I'd really like some kind of kiosk style interface that only shows the programs that students are allowed to run in one severely restricted managed profile and a home folder.
What are you guys doing to keep students out of places they don't belong and only running the programs that they should?