I've been struggling with this for a while now: My organization uses software called Centurion Guard (very much like Deep Freeze) to protect lab PC's and reset the image on reboot.
By unprotecting a partition, I can run the WCG Agent with the system locked. Thats fine, but this puts a big hole in our lab security. In theory, someone could find that partition (which I have mounted as an NTFS directory) and mess with the files (at very least adding to inconsistencies in our labs).

Does anyone have any suggestions how I can prevent user access to the WCG agent partition/directory while (here's the sticking point) - still allow the screen saver function to run on the user's display?

Thank you!