Managed kiosk solution
We have a lot of standalone Win7 kiosks at various sites as well as a training room of 25 workstations. I'd like to replace all these with a managed solution before it grows out of control.
I want to be able to treat each PC like any corporate computer but isolated of course. I plan to build an AD subdomain for kiosk machines/users, use Cisco ISE for Internet authentication and route web access through a dedicated TMG box. I want to use our corporate SCCM 2010 system to deploy systems and manage applications / patches. All this should be achievable but I'm bit stuck on the mandatory profile bit. Microsoft's solution seems to be a standalone solution of manually creating a USER.MAN file. Is there a way to administer a mandatory profile type solution so user changes will be removed upon restart/reboot? I'd like to be able to remotely enable it while being able to make changes when required. I've had a look at a few products like DeepFreeze or Reboot Restore Rx but we have a budget freeze. Not sure if it can be done with group policy. Any pointers?
I want to be able to treat each PC like any corporate computer but isolated of course. I plan to build an AD subdomain for kiosk machines/users, use Cisco ISE for Internet authentication and route web access through a dedicated TMG box. I want to use our corporate SCCM 2010 system to deploy systems and manage applications / patches. All this should be achievable but I'm bit stuck on the mandatory profile bit. Microsoft's solution seems to be a standalone solution of manually creating a USER.MAN file. Is there a way to administer a mandatory profile type solution so user changes will be removed upon restart/reboot? I'd like to be able to remotely enable it while being able to make changes when required. I've had a look at a few products like DeepFreeze or Reboot Restore Rx but we have a budget freeze. Not sure if it can be done with group policy. Any pointers?
Comments
-
Qord
Member Posts: 632 ■■■■□□□□□□
If you can talk them into DeepFreeze, go for it!!! We use it and love it.
A couple other options would be M$'s solution to steady state:
Windows 7 SteadyState solution simplified! - Infrastructure Architecture Blog by Panos Macheras - Site Home - TechNet Blogs
There's also SteadierState:
Steadier State
If it's an option, you might want to think about vdi too.
Edit: I knew I'd seen a discussion about this, just had to dig it up:
http://community.spiceworks.com/topic/217760-free-cheaper-alternative-to-deep-freeze -
Shdwmage
Member Posts: 374
Deep Freeze by Farconics is fantastic. We use it on our Kiosks. I have to periodically thaw them to install updates though.--
“Hey! Listen!” ~ Navi
2013: [x] MCTS 70-680
2014: [x] 22-801 [x] 22-802 [x] CIW Web Foundation Associate
2015 Goals: [] 70-410 -
mikedisd2
Member Posts: 1,096 ■■■■■□□□□□
If you can talk them into DeepFreeze, go for it!!! We use it and love it.
A couple other options would be M$'s solution to steady state:
Windows 7 SteadyState solution simplified! - Infrastructure Architecture Blog by Panos Macheras - Site Home - TechNet Blogs
There's also SteadierState:
Steadier State
If it's an option, you might want to think about vdi too.
Edit: I knew I'd seen a discussion about this, just had to dig it up:
Free/Cheaper alternative to Deep Freeze - Spiceworks
Thanks, I've checked out SteadierSate etc and they all seem to be geared as non-managed solutions, ie have to maintain each PC manually. I may just have to rely on scripts to reset a standard single user profile.