Managed kiosk solution

We have a lot of standalone Win7 kiosks at various sites as well as a training room of 25 workstations. I'd like to replace all these with a managed solution before it grows out of control.

I want to be able to treat each PC like any corporate computer but isolated of course. I plan to build an AD subdomain for kiosk machines/users, use Cisco ISE for Internet authentication and route web access through a dedicated TMG box. I want to use our corporate SCCM 2010 system to deploy systems and manage applications / patches. All this should be achievable but I'm bit stuck on the mandatory profile bit. Microsoft's solution seems to be a standalone solution of manually creating a USER.MAN file. Is there a way to administer a mandatory profile type solution so user changes will be removed upon restart/reboot? I'd like to be able to remotely enable it while being able to make changes when required. I've had a look at a few products like DeepFreeze or Reboot Restore Rx but we have a budget freeze. Not sure if it can be done with group policy. Any pointers?

Find more posts tagged with

Save $250 on 2025 certification boot camps from Infosec!

Book now with code EOY2025

Button

Comments

Qord

If you can talk them into DeepFreeze, go for it!!! We use it and love it.

A couple other options would be M$'s solution to steady state:
Windows 7 SteadyState solution simplified! - Infrastructure Architecture Blog by Panos Macheras - Site Home - TechNet Blogs

There's also SteadierState:
Steadier State

If it's an option, you might want to think about vdi too.

Edit: I knew I'd seen a discussion about this, just had to dig it up:
http://community.spiceworks.com/topic/217760-free-cheaper-alternative-to-deep-freeze

Shdwmage

Deep Freeze by Farconics is fantastic. We use it on our Kiosks. I have to periodically thaw them to install updates though.

mikedisd2

Qord wrote: »

If you can talk them into DeepFreeze, go for it!!! We use it and love it.

A couple other options would be M$'s solution to steady state:
Windows 7 SteadyState solution simplified! - Infrastructure Architecture Blog by Panos Macheras - Site Home - TechNet Blogs

There's also SteadierState:
Steadier State

If it's an option, you might want to think about vdi too.

Edit: I knew I'd seen a discussion about this, just had to dig it up:
Free/Cheaper alternative to Deep Freeze - Spiceworks

Thanks, I've checked out SteadierSate etc and they all seem to be geared as non-managed solutions, ie have to maintain each PC manually. I may just have to rely on scripts to reset a standard single user profile.