I currently admin about 25 public Macs running OS X. What we currently do have two accounts- one guest and one admin. A clean copy of the guest account is kept compressed (tar) on the hard drive. At startup, the old guest home folder is removed and replaced the with backup that has nothing extra there. This saves lots of headaches since problems can usually be fixed with a restart. Couple that with some creative permissions and SetFile (found in developer tools) to make unnecessary things invisible and you have a secure workstation that can be put back to like-new condition with only a reboot.
Slashdot Mirror
The Myth series have always been my personal favorite. Thanks to project magma, the Myth 2 engine is continually being updated too.
I currently admin about 25 public Macs running OS X. What we currently do have two accounts- one guest and one admin. A clean copy of the guest account is kept compressed (tar) on the hard drive. At startup, the old guest home folder is removed and replaced the with backup that has nothing extra there. This saves lots of headaches since problems can usually be fixed with a restart. Couple that with some creative permissions and SetFile (found in developer tools) to make unnecessary things invisible and you have a secure workstation that can be put back to like-new condition with only a reboot.