Securing a High School Windows XP Computer Lab?

An anonymous reader asks: "My SO just inherited a computer lab from a departed teacher who was no security guru. These are Windows XP systems, and security basically consists of a password on the admin account, a subscription to McAfee Security Center, and a free Internet filter. The students have access through a non-passworded 'limited' user account that doesn't seem to limit much. They have been going in and changing settings, downloading games and music, and generally screwing the computers up during class time, in many cases leaving them unusable. As the geek in our house, she has asked me to give her a hand, but while I have dealt with some security issues in the past, it was to protect against remote intruders, not against someone who has to have access to the keyboard. Any suggestions on the best way to lock these systems down?"

Easy solution

[brucmack]

Lock the door.

Re:Come on, did you really have to ask Slashdot?

[HoosierPeschke]

Nah, try gentoo [gentoo.org]. It'll be really secure then.

Security

[Nimey]

This is my suggestion. [russian-mosin-nagant.com]

Obligatory Star Wars Quote

[Anonymous Coward]

...and pray that they don't have blasters.

Re:One word: Don't

[SpottedKuh]

as someone who used to activly help in un-securing school computers to do what i wanted. i have to agree with the dont bother comment becuase its much more trouble than its worth make and image and push it out over the network that what they did at my school.

I think what you're trying to say is...that you screwed around with school computers during English class?

Re:An Idea...

[Anonymous Coward]

My 12 year old son can't tell the difference between Windows XP with MS Office 2003 and Linux with XPde and OpenOffice. On a Pentium II 400 MHz system with 256 MB of RAM.

I'm guessing your 12 year old is not the brightest candle in the chandelier, is he?

(Kidding, dude, but you have to admit you left yourself wide open for that one)

Terminal server, drive images, isolated network

[Werrismys]

If it HAS to be windoze, just get thin clients and run it off servers. After every class re-image the client disks. Do not connect it to external networks. Then nuke from orbit, level the building and spread salt. The only way to be sure with XP.

Re:Easy solution

[PastAustin]

I was going to go with remove the keyboards. The only way to secure a Windows PC is have someone constantly watch over them. Novell has some good deals for schools.

Yet another obligatory quote

[Alcari]

"take off and nuke the entire site from orbit. It's the only way to be sure" [nukeitfromorbit.com]