Primarily, I'd like to limit student access to a web browser and a few testing browsers. I was originally looking to set up a DC and all of that (we currently have none), but I realized that this would be overkill given the limited scope of what we're looking to do. We are looking to 'lock down' our students' testing computers.
I work IT for a medium sized charter school.