If I removed Deepfreeze from my hosts, we would be destroyed in days. Some systems NEED endpoint security.

I wasn't "blindly judging" you, I was qualifying your statement. DeepFreeze isn't security. Anything executed on your badly configured because it requires DeepFreeze for "security" workstations can propagate and become persistent. DeepFreeze won't protect you from ransomware affecting file shares launched , for example.

I then offered actual security solutions; configuration hardening, segregation of systems, implementing app whitelisting and proper access controls etc. You mistook this for a personal attack, then got attacked me ("Yeah you have fun with your 6 year olds"). Yet somehow I was being unprofessional? I took your incorrect statement of DeepFreeze "securing" your workstations as requiring further information than "NO lern 2 IT nub" and gave some pointers.

I will, however, apologise for the use of the word "laziness." It wasn't my intention to call you lazy. DeepFreeze can bring about complacency, though, as it encourages sweeping bad configuration errors under the rug instead of dealing with them.

And WTF is with /u/zwgmu7321? "This sub has a huge issue with people trying to one up each other and to show off their IT knowledge." This is literally why I am here; To share knowledge. I'm not "one-up"ing anyone, I'm sharing my knowledge and experience directly related to the topic being discussed. What did you want? An in-depth technical investigation into how to implement those technologies? Apologies, I thought this was /r/sysadmin where professionals came to share IT knowledge. LMGTFY.

I've spent long enough on this. Please, don't trust DeepFreeze to "secure" your workstations. If you still need it because your kids keep screwing up the computers, work on your configuration. All the technologies I use are in that post.