I have about 20 large and many small computer labs under my control ranging from Elementary schools to Adult Education. The trick is finding a ballance between having the computer locked down so much that your users can just barely do what they need to or leaving them open but rebuilding them frequently.
Over my seven years doing this I have found that the single most important factor is the lab monitor and how they conduct business in the lab. An organized teacher who is monitoring the computer use and enforcing verbal policies will have far fewer problems. I have two high school labs that are configured exactly the same. I spend literally 3 to 4 times as much time in the lab where the teacher is more permissive with his students. (sorry I started to get up on my soap box)
In most of our XP labs we are allowing the students to log in with a user account. Setting verbal instructions about screen savers Icon placement etc. And use Ghost images to restore the workstations when things get out of hand. I've set up ghostcasting on the teachers station (a shortcut that sets up all of the perameters selects the image etc.) And then I have a boot disk for the workstations that is customized for this connection so that the lab attendant can rebuild the computer simply and easily.
In the past we have used:
--Desklock (for locking down elementary schools)
--Fortres 101 (for locking down High schools, this is my personal favorite)
--Net Support School (to monitor students)
I have also been hearing some very good things about a product called Deep Freeze though I have not been able to try it out myself yet.
you can Email me if you have specific questions csilveira@lmusd.org
Chris
--