How to organize an automatic "reset" of Windows to a configured state?

Question

System administration

Given a total of 200 working computers in 30 geographic locations (offices). Computers (i7-i5 of various configurations) for working with vector and raster graphics. Each office has its own local NAS.
1 "server" (heap of iron) on which SMB storage hangs, domain accounts, IP telephony
All this is connected together through a layer 2 tunnel by the Internet provider.
Doubtful flash drives are constantly connected to computers, and files are downloaded from dubious sources.
Some software, like many who take medication, require additional attention.
Task: to come up with an automatic mechanism for resetting the axis to a "virgin" state.
Desktop shortcuts, printer drivers are configured on computers, special settings for graphic editors are set. All this should be preserved upon reset.
Now we get out with an external hard drive on which there are several images of the main assemblies for recovery through Acronis. After restoring the image, some of the settings have to be set manually (as well as some of the software and some drivers).
Ideally, we are looking for the possibility of automatically cloning a hard drive using an image saved on a local NASe.

Answer 1

there used to be a Shadow User program after installing it, the system returned to the state "at the time of installation" on each reboot, all files and settings saved outside the allowed folders were deleted.
We put it in a technical school and schools to protect against "small coolhackers" it was effective.

Answer 2

Can the built-in restore point creation in Windows work?

Answer 3

How to organize an automatic "reset" of Windows to a configured state?

Very simple.
Install all the necessary software, make the necessary settings.
Then set up a standard Windows backup system.
Enable scheduled shadow copies.
As a result, if something broke there, the ransomware worked, or the viruses were hooked, then simply roll back to the previous checkpoint. It's literally three minutes.
If a rollback is not possible - for example, a serious virus or ransomware has been caught, or the HDD has died altogether - restore the last successful image from the backup, or not the last one, but on the desired date.
It takes twice as long - 5-10 minutes.
That's all.

Answer 4

restore reboot rx -- the program returns everything to its original state after a reboot. I put the free version in a public place, sometimes there were failures and user records leaked. I rolled a pre-prepared image with all programs (~ 15 min.)

Answer 5

You create a reference image of the system, configure it and stick it into the installer image. In work, you can use either the "guest" account or roll back the system to its original form.

Answer 6

By the way, storing accounts not locally can help you.