We are just getting ready to deploy about 200 Macbooks (about 40 teacher and 160 student machines) and only 1 technician responsible for the upkeep and administration of these machines. Our problem is that we want to restrict these accounts so they do not install unauthorized software etc. but, if we do this, they are not allowed to install software updates either. Is there any way around this? I have a feeling I'll be overwhelmed with trying to authenticate as admin on all of these machines when software updates are released.
I do have Apple Remote Desktop but I've not had a lot of time to see how it can help me yet. Does anyone with experience in a similar environment have any suggestions for me while I keep researching the issue? Is it better to just go ahead and grant admin privileges to all users? Thanks for you time!
