Thank you for both of your suggestions. I will look into mandatory profile as well as DeepFreeze. As for fizban2's question about why we are implementing this restriction, I am working at a school and people increasingly uses those machines to download illegal files from the internet. To minimize the abuse, the school decided to put this restriction on those machines. They will still be able to save their work on their NFS share, but not on the local machines. I have seen machines which has two partitions and disallow users from accessing the primary partition. I think I can do this, but it seems to me that it is absurd to make 50 MB partition for such purpose. I will keep looking for a better way to implement this.