LinuxQuestions.org - Security Configuration for Inexperienced Linux Users

Hello,
Hopefully you'll be able to help me on this...

I have few computers that will be used by inexperienced Linux users so I don't really want them to mess anything on them (which, I know, they’ll probably do from time to time).

This is what I would like to configure on the desktops:

- NO write permission on the hard disk at all (Read, Execute is OK as long as my systems are kept secure)
- The user HOME directory should be in an USB Thumb Drive (which they will carry all the time)
- They should have full read / write / execute permissions on their USB Drive
- The user should be able to login with his / her USB Drive on few named computers (there will be other PCs that will not be configured this way within the same network
- Once logged, the Network administrator should be able to “download” some files to the users USB Drive.
- The user should not need to type his / her login password on the computer, plugging in his USB Drive should be enough (well… this is optional, it would be nice, wouldn’t it??)

Since the users will carry their USB Drive wherever they want, they could load any software to it (They will also have access to Internet from my network). What do you think of this approach for keeping my desktops and my network secure?

If you think this is not the best idea, what would you implement considering that the users DO need to be able to take their files home and bring their files from home? I thought on this approach in order to keep their personal files off my computers (in case of any computer crash, other users files would also be safe!).

Notice that I’ve not yet decided the distribution I will be using. I’m open to most of them in case it makes a difference in the requirement (as long as it has a good support for Spanish).

I really appreciate your time, hopefully you will be able to help me, any ideas are welcome! :)

Regards,
Cesar