Mandatory Profiles and using Gpo's to lock down user

[WasDmater]

Hi

I have been reading about user profiles and creating Gpo's.If i wanted students in a school setting not to be able to destroy the way their desktops were created i could use mandatory profiles or create group policies that restrict what they are able to do.

My question is:Which method is more appropiate and which is better considering the network as a whole?Which method is quicker as far as logon times and transfer of files?What are the pros and cons?

Tnaks for any advice you might send my way.

WasDmater

I think this is a great question..

In fact, it would likely be a COMBINATION
of the two to get the job done.

In a nutshell, I think manditory profiles provide the BASELINE
lockdown, then GPOs add "fine tuned" lockdown.

There's a bunch of stuff that you COULD do in a profile,
but are just too darned hard. Okay, why not just use GPOs?

So, the answer really is ... GPOs + MPs = Lockdown.