In the past we've been using Deepfreeze to basically lock down and secure our non-managed, stand alone macs in labs. With the new OS and the APFS, deepfreeze does not currently have a version that will work. The closest estimate of when they'll have it ready is "this year". Meanwhile, we'll...