[–] nyrosis 0 points 1 point 1 point (+1|-0) ago
We disable automatic updates and telemetry completely and make use of steady state tools like reboot restore for systems that require windows applications.
This allows us to disable system restore, antivirus, and backup tools. We map a SMB share to the P ("Persistent" drive letter). That data is stored on a freenas data server replicated to 2 other offsite locations.
Also, each machine has the Fog service installed. That means we can backup/image any system we choose overnight. We also employ Veyon as a means of computer monitoring and lab management.