All not needed ports are closed. Ask Hap to keep this server invisible form off-campus. Perhaps ask Hap to make it invisible from the outside of the cs subnet. Do not mount files from the file server. Provide local home directories and authentication using NIS on the file server.
Regular users have no access to the console.
The only remote access is via ssh and scp. There are no other RPC services. Offer access to user and custom files, Offer to local users basic Linux environment with an X-windows GUI, Offer programming languages used in Comp. No computer in this lab is powerful enough to run two operating systems. If possible upgrade the computers which are currently running Windows 95.