speaking from experience in an edu..people swear by deepfreeze..but they give users admin privileges(because all changes are gone on reboot, which is done nightly). Funny thing about that is you could own the entire network in under 3 minutes and not have to worry about deepfreeze.