- Create two user accounts
- Administration account
- Kiosk Account - This account will be locked down with Parental Controls
- Set up remote management
- We are using Screens 4
- See Screens documentation Configuring macOS for Remote Access
- Install kiosk software
- We use a role-based Apple ID (ex: webmaster@[institution].org) to manage macOS software. Managing Apps this way saves lots of headaches.