Setting up Mac lab correctly

I have a few student machines that I create open accounts on (no password), but then use Parental Controls to restrict the applications and functions that they may use. I also clean off totally each account -- wipe it out and recreate -- once a month. That deals with the files and the clutter.

If a student wanted an account for a specific purpose, I would consider granting that for a limited period of time. With faculty, you would be on a different level as the machines would be owned by the school/college. You might consider giving them more access. The students will push anything to its limits, so limits need to be set. Can you trust the faculty?

If the Finder is restricted (Simple Finder), and only you have the admin account details, they cannot install software. There may be the odd example of an application that they put on (USB drive) that will work in a student account. They will need monitoring anyway.

It sounds as if you might benefit from NetRestore and from the NetRestore forum.

(All software by Mike Bombich is free for use in education.)
Moderator, forums.bombich.com