There are probably 2 good ways of doing this. One cheaper than the other.
One way would be to build a full blown "client/server" network w/a dedicated server as a domain controler then give them all restricted accounts. This could be a little expensive since you have to have a dedicated computer w/a server O/S (Win2003 or 2008) etc. But you can lock down the accounts pretty good. And you can manage all or their acconts from that central location, which is very convenient.
The other way would be to buy a copy of VMWare and build virtual machines for them. Then make backups of all of the virtual machines. Then if they trash the virtual machine, you just copy back the original and in effect, they have a new computer. This is much cheaper than setting up a client/server network and easier too.
There are probably 2 good ways of doing this. One cheaper than the other. One way would be to build a full blown "client/server" network w/a dedicated server as a domain controler then give them all restricted accounts. This could be a little expensive since you have to have a dedicated computer w/a server O/S (Win2003 or 2008) etc. But you can lock down the accounts pretty good. And you can manage all or their acconts from that central location, which is very convenient. The other way would be to buy a copy of VMWare and build virtual machines for them. Then make backups of all of the virtual machines. Then if they trash the virtual machine, you just copy back the original and in effect, they have a new computer. This is much cheaper than setting up a client/server network and easier too.