CGA

You may want to try the options suggested in the following MS forum: http://social.technet.microsoft.com/Forums/en-US/configmgrgeneral/thread/5ddd9596-8d50-4177-90d8-fc1a0272f950 The accepted answer states options of using: GPO or login script amongst others. You may also want to check out solutions like Avecto's Privilege Guard, which allows you to reduce the users to "standard users" while either elevating individual admin privilege on apps/functionality, and/or doing complete white/black listing. I'm know of, but am unfamiliar with the usage of DeepFreeze. Does it let you do incrementals? If not, you may also want to try something like Acronis Backup & Recovery or Symantec Ghost. But that's harder to justify now that you already have DF. Still though. Check out the PG app. It's GPO based, and may be worth your time. Good Luck