Highschool Computer Lab Setup
Highschool Computer Lab Setup
Hi there! I’m a computer science teacher at a charter school, just received a lab setup with 25 new laptops. The tech team is offering flexibility in managing these devices and isn’t pushing for them to be added to the school system, which would save me from having to request permission multiple times each year. My goal is to configure everything locally so I can run programs across all devices at once, or at least create profiles that apply specific applications. I have full administrative access and need to add other users who will have limited permissions—especially for installing software. This is my first time creating a lab, so I’d really appreciate guidance on setting this up securely while keeping things safe if the devices leave the school premises.
If the school system covers licensing costs for Endpoint Manager, that’s the best approach. After completing the setup multiple times, deploying via Endpoint Manager becomes straightforward. For extra security, you can configure a rule in Endpoint Manager so laptops won’t log in outside the school network and will automatically rejoin the domain when reinstalled.
Install HyperV on your desktop, create a Windows VM tailored to your needs, and customize it exactly as desired. Export the VM as a VHDX file, transfer it to a USB flash drive, and mount the VHDX across all your devices. For managing software, Chocolatey with the public repository offers a free solution. Securing the devices will be challenging without tying them to a domain.
My high school had a setup similar to this. The teacher used a distinct Active Directory for his lab. You could replicate that approach, since the Windows Server trial lasts about 180 days—roughly six months—which would be convenient to refresh each semester. Moreover, he had some advanced students help maintain it under his supervision.