We use Deep Freeze for in-house public access computers, but have opted for
Reboot Restore Rx Pro for our circulating Windows laptops which we believe
makes for a safer patron experience with regard to saved files.  It also
makes for a faster turnaround time when they're returned, as we can just
tell it to create a new baseline on each laptop after applying any
updates.  While chrome books with a paid service and possibly associated
vending hardware seems like the most convenient way to go when it comes to
staff intervention, I'm trying to stay away from chrome books for as long
as possible (when it comes to obstinacy in IT decisions, I consider this to
be a relatively innocuous one in which I indulge ;-).

John Lolis
Coordinator of Computer Systems

100 Martine Avenue
White Plains, NY  10601

tel: 1.914.422.1497
fax: 1.914.422.1452

https://whiteplainslibrary.org/

*“I would rather have questions that can’t be answered than answers that
can’t be questioned.”*
— Richard Feynman
<https://click.fourhourmail.com/5qure95xkf7hvvo93wh2/7qh7h8h05vr4zrtz/aHR0cHM6Ly9lbi53aWtpcGVkaWEub3JnL3dpa2kvUmljaGFyZF9GZXlubWFu>,
theoretical physicist and recipient of the Nobel Prize in Physics in 1965


On Sat, 11 Mar 2023 at 14:49, Tod Olson <[log in to unmask]> wrote:

> Our central IT maintains a help desk in the Library, which includes
> checking out laptops (and chargers, and other equipment) through our
> library system. And they get a fair amount of traffic during their
> operating hour.
>
> But the equipment loans are very much a mediated process, not
> self-service. And the user information is wiped upon return.
>
> -Tod
>
> Tod Olson <[log in to unmask]<mailto:[log in to unmask]>>
> Systems Librarian
> Interim Head of Integrated Library Systems
> University of Chicago Library
>
> On Mar 10, 2023, at 12:53 PM, Brent Palmer <[log in to unmask]<mailto:
> [log in to unmask]>> wrote:
>
> We loan laptops and looked into the kiosk solutions originally and ruled
> them out as too expensive. (And from what I remember they generally just
> use Deepfreeze-like software to wipe them anyway).  We shied away from the
> deep-freeze like option because we could imagine situations where patrons
> lost data because they didn't plug the laptop in in time. It seems like
> there should be a Deepfreeze where it's triggered on demand instead of by a
> restart, but at the time I couldn't find one.
>
> So one of my guys came up with a technique where the laptops had a
> separate partition with an image of the OS partition saved to it. So when
> the laptop came back the circ staff would plug in a USB with a live version
> of Linux on it. There was a button on the linux desktop that would run a
> script that would use clonezilla to reimage the OS partition from the other
> partition on the laptop. As I'm writing this, it is sounding very
> Code4lib-ish.
>
> In the end I decided the time we spent on maintenance for these got to be
> too much. He was spending too much time when it was time to do windows
> updates because it involved reimaging the OS back to the second partition
> after the updates (He had to put a hold on all of them and as they came
> back they would get cycled to IT and back into circulation).  Also there
> were too many physical repairs as well. So I just told them that if they
> want to circulate laptops, we have to switch to using cheaper Chromebooks.
>
> So now, the Chromebooks come back and get power-washed and that's it. And
> no repairs, just replacements.
>
> Brent
> Iowa City Public Library
>
>
> -----Original Message-----
> From: Code for Libraries <[log in to unmask]<mailto:
> [log in to unmask]>> On Behalf Of Hammer, Erich F
> Sent: Friday, March 10, 2023 12:33 PM
> To: [log in to unmask]<mailto:[log in to unmask]>
> Subject: Re: [CODE4LIB] Securing Loaner Laptops
>
> Mike,
>
> I brought this up on the LABMGR listserv a couple years back, and there
> was enough discussion that someone arranged for a virtual panel discussion
> (that I was unfortunately unable to attend).
>
> The general consensus was that because of the zeroth rule of security
> ("Without physical security, there is no security."), laptops pretty much
> have to be wiped between users.  If you are going to wipe it anyway, you
> may as well give the user admin rights so they can do what they need.
>
> We haven't gotten back into lending laptops mostly for budgetary reasons,
> but if we do, that is the model we will be following.  I don't know if we
> will try to establish our own procedure, or go with a laptop "vending
> machine" kiosk.  My understanding is that those are designed to wipe and
> re-image the machines when they are returned.
>
> Erich
>
>
>
> On Friday, March 10, 2023 at 12:58, Mike Paulmeno eloquently inscribed:
>
> To All:
>                I have a question for the group.  Does anyone here
> work at an institution which lends laptops out?  Our campus is going
> to implement such a program.  The impetus is coming from IT and the
> student government, but the library will be involved as the plan is to use
> self-checkout machines.
> We're wondering how other institutions secure the laptops themselves.
> Do you wipe them after each use or just use something like Deep
> Freeze/lock the devices down so people can't install anything?
>
> Best,
> Mike
>
> Michael Paulmeno Systems Librarian Lucy Scribner Library, 210 Skidmore
> College (518) 580-5505  [log in to unmask]<mailto:[log in to unmask]
> ><mailto:[log in to unmask]> He/Him/His
>